Automation from an SoR is usually coarse grained.
Users often must request "something extra."
Users don't know what to request, but usually know someone who already has it.
This mechanism offers assistance without resorting to "clone user."
Requester formulates a request by comparing "recipient" and "model" users.
Recipient may be the requester (self-service).
Access controls limit visibility of both recipients and model users based on
their relationship to the requester
Requester sees differences and selects some or all to be included in a request.
Approvals, fulfillment proceed as with any other request.