Hi @lei
We released a new version this week that makes machine identities respect approval requests. By default any new change policy will enforce approval requests, but you can configure this behavior in the policy by toggling "Bypass approval for Machine Identities". Existing policies do not enforce this, so you will need to disable the machine identity bypass in order to make your machine identities to create approval requests.