either one of the field is not filled ...block the order

[VinushaN0004809]

either the security group or attachment needs to be filled in. So I would need 1 of the 2 to be filled in before they can click order button?

[AlpUtkuM]

I would make It much simplier.

When you think of your case, I would make Azure AD Securirty Group field mandatory. (As It would not make sense to provide list of users without knowing the group name) Then I would create list collector variable referencing to sys_user table to allow requestor to select multiple users instead of adding attachment.