Templates / Route IAM events with GPT-4o-mini, forgeLLM, Slack, email, and audit logs

Route IAM events with GPT-4o-mini, forgeLLM, Slack, email, and audit logs

Ready for 3.0

by Cheng Siong Chin ✓ · 65 views · created 2026-03-28 · SecOps, AI Chatbot

Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.

What this workflow does

This AI workflow has 21 nodes and runs when an HTTP POST request hits its webhook URL. Along the way it connects OpenAI Chat Model, HTTP Request, Slack and Gmail and 1 more. It also calls api.runpod.ai over HTTP.

How it runs

Trigger: When an HTTP POST request hits its webhook URL.

  1. Governance Agent (AI Agent): runs an AI agent, with model: Governance Model; 6 tools (Audit Log Tool, forgeLLM API Tool, Access Signal Agent, Compliance Query Tool…); memory: Conversation Memory; output parser: Governance Output Parser
  2. Route by Decision (Switch): routes items into 4 branches
  3. Prepare Approved Data (Edit Fields (Set)): sets 9 fields: event_id, user_id, resource…
  4. Store Revoked Events (Data table): uses Data table
  5. Prepare Revoked Data (Edit Fields (Set)): sets 9 fields: event_id, user_id, resource…
  6. Store Escalated Events (Data table): uses Data table
  7. Prepare Escalated Data (Edit Fields (Set)): sets 10 fields: event_id, user_id, resource…
  8. Store Approved Events (Data table): uses Data table
  9. Return Response (Respond to Webhook): sends the response back to the webhook caller

Services it uses

OpenAI Chat ModelHTTP RequestSlackGmailData table

HTTP calls to: api.runpod.ai

Before you upgrade to n8n 3.0

Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.

Nodes used (14)

From the author

How It Works This workflow automates Identity and Access Management (IAM) event governance using an AI agent, targeting security operations teams, compliance officers, and IT governance teams managing cloud or enterprise IAM systems. The core problem it…

Excerpt from Cheng Siong Chin's description on n8n.io.

View the original on n8n.io → Check your own copy

Get the weekly “what broke” email

New templates, newly broken ones, and n8n release changes. One short email a week.

Form not loading? Subscribe here.