Create requests
Depending on how you've set up Access Requests to manage requests, requesters can submit requests using different methods. Requesters can cancel a submitted request using the Access Requests web app if a team member or approver hasn't taken any action on it. They receive a notification about the request cancellation based on the notification preferences that they've set up.
Requesters can cancel a submitted request using the Okta Access Requests web app if a team member or approver hasn't taken any action on it. They receive a notification about the request cancellation based on the notification preferences that they've set up.
A user can also submit requests on behalf of another user with the Access Requests web app if they're both an audience for a request type. While users can submit requests for another user through the Okta Access Requests web app or End-User Dashboard only, request creators and requesters can receive notifications about the request in Microsoft Teams and Slack based on their notification settings. The System Log records the user who created the request.
For example, a manager can request access to apps on a new employee's behalf so that they're available on their first day. The new employee doesn't have to request access to apps after they join the team.
By default, all users can view requests. You can mark a submitted request as private or you can update your team settings to mark all incoming requests for the team as private. See Create an Access Requests team
Requests managed by access request conditions
After you set up access request conditions for an app or resource collection, users who meet those conditions can request access to the app or collection directly from the resource catalog of their dashboard. If the conditions include a requester-specified access duration, users indicate how long they need access (up to a limit that you configure).
If you've defined separation of duty (SOD) rules for an app and configured access request settings for the app or resource collection, requester experience may vary based on the access request settings. See Configure settings.
By default, all requests are marked as private so only the requester, request assignee, and users who are assigned to a step in the request can see it.
If you're new to Access Requests, use conditions to manage access requests first.
Requests managed by request types
Requesters can use the Okta Access Requests web app, Slack, or Microsoft Teams to submit requests for a resource if you have one or more active request types.
When requesting access from the Okta Access Requests web app, requesters decide which request type to choose to get the access they need.
When requesting access through Slack or Microsoft Teams, Access Requests uses machine learning to parse information from natural-language requests and compare it to historical requests. If a requester sends a message stating, I need a Grammarly account or I need to access Jira, the system tries to identify the request type that best fits the request. If the system doesn't classify a request correctly, the requester can manually adjust the request.
Unified requester experience
Early Access release. See Enable self-service features.
After you enable Unified requester experience, the process of requesting access to resources is the same, regardless of how resource access is managed – by conditions or by request types. As an admin, you have the flexibility to use either or both methods together based on your requirements and manage resource access without altering the requester experience.
Requesters can initiate requests for resources directly from their dashboard, Slack, or Microsoft Teams. When they request access from their dashboard, request types appear as tiles alongside apps and collections. The settings for a request type's audience continue to govern which users can view the request type on their dashboard and request access.
Request types aren't available in the Access Requests web app if a user isn't an admin or a team member who owns the request type. Requesters can click Resource catalog (previously, Access Requests) in the Okta Access Requests web app to request access.
Methods to submit requests
The approver experience depends on whether the approver takes action within the Okta Access Requests web app, Slack, or Microsoft Teams. To understand the approval steps in the Okta Access Requests web app, see Manage tasks.