mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-09-22 13:39:35 +00:00
40 lines
2.0 KiB
Plaintext
40 lines
2.0 KiB
Plaintext
---
|
|
title: "Access Requests"
|
|
description: "Learn how to request access to sensitive resources in Infisical."
|
|
---
|
|
|
|
In certain situations, developers need to expand their access to a certain new project or a sensitive environment. For those use cases, it is helpful to utilize Infisical's **Access Requests** functionality.
|
|
|
|
This functionality works in the following way:
|
|
|
|
1. A project administrator sets up an access policy that assigns access managers (also known as eligible approvers) to a certain sensitive folder or environment.
|
|
|
|
|
|
<Note>
|
|
A step policy enables a sequential approval workflow in which approvals
|
|
must follow the designated chain.
|
|
</Note>
|
|
|
|
|
|
|
|
2. When a developer requests access to one of such sensitive resources, the request is visible in the dashboard, and the corresponding eligible approvers get an email notification about it.
|
|
|
|
|
|
|
|
3. An eligible approver can approve or reject the access request.
|
|
{/*  */}
|
|
|
|
|
|
<Note>
|
|
Optionally, approvers can edit the duration of an access request to reduce how long access will be granted by clicking the **Edit** icon next to the duration.
|
|
|
|
</Note>
|
|
|
|
<Info>
|
|
If the access request matches with a policy that allows break-glass approval
|
|
bypasses, the requester may bypass the policy and get access to the resource
|
|
without full approval.
|
|
</Info>
|
|
|
|
5. As soon as the request is approved, developer is able to access the sought resources.
|