Now that's a cool new addition: custom workflows for Azure AD Privileged Identity Management (PIM). You can now designate users that can approve permission elevation for the just-in-time model that PIM enables, and you can also audit events. Read more here: https://blogs.technet.microsoft.com/enterprisemobility/2017/05/24/azure-ad-privileged-identity-manag...
In case you havent heard about PIM beforehand, read here: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-privileged-identity-managem...
Still limited to Azure AD P2 subscriptions though :(
