Is there any best practice to request an entitlement for an AD group? I did not find it OOTB, maybe I just missed it.
There are no OOTB forms/features that enable managing Groups' access. You would need to build your own custom Request Forms and Workflows to achieve this.
we are actually just about to publish a new paper on linking Groups (can be AD or other) to application entitlements.
Clive Morrish is finalising and should release it shortly.
Retrieving data ...