HelloID doesn't know when a request for e.g. an application is done via Serviceautomation. When an employee changes its job, the assignment will not be removed. If you can somehow link a request to a jobcode (functiecode) and the assigment can persist until the user changes its job then you have fixed the "HelloID does not know" that this application has been assigned to the user outside of HelloID, and the application/right does not travel with the employee inside the organisation.