diff --git a/docs/documentation/platform/access-controls/access-requests.mdx b/docs/documentation/platform/access-controls/access-requests.mdx index 58b21d4eb..bfc370d10 100644 --- a/docs/documentation/platform/access-controls/access-requests.mdx +++ b/docs/documentation/platform/access-controls/access-requests.mdx @@ -6,21 +6,29 @@ description: "Learn how to request access to sensitive resources in Infisical." In certain situations, developers need to expand their access to a certain new project or a sensitive environment. For those use cases, it is helpful to utilize Infisical's **Access Requests** functionality. This functionality works in the following way: + 1. A project administrator sets up an access policy that assigns access managers (also known as eligible approvers) to a certain sensitive folder or environment. -![Create Access Request Policy Modal](/images/platform/access-controls/create-access-request-policy.png) -![Access Request Policies](/images/platform/access-controls/access-request-policies.png) + ![Create Access Request Policy Modal](/images/platform/access-controls/create-access-request-policy.png) + + + A step policy enables a sequential approval workflow in which approvals + must follow the designated chain. + + ![Access Request + Policies](/images/platform/access-controls/access-request-policies.png) 2. When a developer requests access to one of such sensitive resources, the request is visible in the dashboard, and the corresponding eligible approvers get an email notification about it. -![Access Request Create](/images/platform/access-controls/request-access.png) -![Access Request Dashboard](/images/platform/access-controls/access-requests-pending.png) + ![Access Request Create](/images/platform/access-controls/request-access.png) + ![Access Request Dashboard](/images/platform/access-controls/access-requests-pending.png) -4. An eligible approver can approve or reject the access request. -{/* ![Access Request Review](/images/platform/access-controls/review-access-request.png) */} -![Access Request Bypass](/images/platform/access-controls/access-request-bypass.png) +3. An eligible approver can approve or reject the access request. + {/* ![Access Request Review](/images/platform/access-controls/review-access-request.png) */} + ![Access Request Bypass](/images/platform/access-controls/access-request-bypass.png) - If the access request matches with a policy that allows break-glass approval bypasses, the requester may bypass the policy and get access to the resource without full approval. + If the access request matches with a policy that allows break-glass approval + bypasses, the requester may bypass the policy and get access to the resource + without full approval. 5. As soon as the request is approved, developer is able to access the sought resources. -![Access Request Dashboard](/images/platform/access-controls/access-requests-completed.png) diff --git a/docs/images/platform/access-controls/access-request-bypass.png b/docs/images/platform/access-controls/access-request-bypass.png index 248150574..549190f86 100644 Binary files a/docs/images/platform/access-controls/access-request-bypass.png and b/docs/images/platform/access-controls/access-request-bypass.png differ diff --git a/docs/images/platform/access-controls/access-request-policies.png b/docs/images/platform/access-controls/access-request-policies.png index a0eca9dfd..53fbff420 100644 Binary files a/docs/images/platform/access-controls/access-request-policies.png and b/docs/images/platform/access-controls/access-request-policies.png differ diff --git a/docs/images/platform/access-controls/access-requests-pending.png b/docs/images/platform/access-controls/access-requests-pending.png index d75f669e2..85ac66505 100644 Binary files a/docs/images/platform/access-controls/access-requests-pending.png and b/docs/images/platform/access-controls/access-requests-pending.png differ diff --git a/docs/images/platform/access-controls/create-access-request-policy.png b/docs/images/platform/access-controls/create-access-request-policy.png index 56f9840cf..2e0aa22bb 100644 Binary files a/docs/images/platform/access-controls/create-access-request-policy.png and b/docs/images/platform/access-controls/create-access-request-policy.png differ diff --git a/docs/images/platform/access-controls/request-access.png b/docs/images/platform/access-controls/request-access.png index 63c76dbd5..9c28851d2 100644 Binary files a/docs/images/platform/access-controls/request-access.png and b/docs/images/platform/access-controls/request-access.png differ diff --git a/frontend/src/pages/secret-manager/SecretApprovalsPage/components/ApprovalPolicyList/components/AccessPolicyModal.tsx b/frontend/src/pages/secret-manager/SecretApprovalsPage/components/ApprovalPolicyList/components/AccessPolicyModal.tsx index 00ba857cb..e7e00d7eb 100644 --- a/frontend/src/pages/secret-manager/SecretApprovalsPage/components/ApprovalPolicyList/components/AccessPolicyModal.tsx +++ b/frontend/src/pages/secret-manager/SecretApprovalsPage/components/ApprovalPolicyList/components/AccessPolicyModal.tsx @@ -397,7 +397,6 @@ export const AccessPolicyForm = ({