How can we use celonis to solve the issue of a user getting access without proper approval leading to security incidents rising

Well, you will need to create a digital twin of the approval process. Let's say you have it implemented in SailPoint and AD, so you will need logs from them.

then, eventually you can use AF to detect cases where the approval process is not ok.