I'm looking at using workflow to provision zenworks applications. What I'd
like to achieve is to when a user requests a application (or resource) from
the user application, the result of the workflow should be that a user
becomes member of a group that has the application associated.

Now, if I'm correct, there are two ways of achieving this.
The first one is to use entitlements and a lookback driver which would
result in a entitlement for each application, or maybe roles, which could be
a group with multiple applications associated.

The second one could be entity activities. A workflow needs to have at least
one entitlement or entity activity.

Has anyone any advice on what the best way is to use this kinda setup ?