Resource creation is a great feature, especially in combination with dynamic permissions. However currently they're kind of a black hole because the customer does not get notified when a new resource has been created.

For example: I have a dynamic permission item configured for Active Directory which adds a user to a group based on the department externalId. Resource creation is configured to create AD groups based on the department externalId. When a new AD group is created the new user will recieve an empty AD Group because it was just created. The IT admin has no knowledge of this group being created until the user figures out he/she does not have the correct access and calls the IT helpdesk.

(See screenshot for example)