Access requests with BalkanID for Slack

Access requests with BalkanID for Slack

If BalkanID for Slack is not set up for your tenant, please visit BalkanID for Slack for more information.

Use /request-access in Slack to create a classic access request. You can request access for yourself or another person.

You can grant or revoke connections and resources. Requests can be permanent or temporary.

Create an access request

1. Run /request-access.

2. Choose who needs the access change.

3. Choose Permanent or Temporary access. Enter an end date for temporary access.

4. Under Access identical to, choose a baseline:

   • Access identical to user

   • Access identical to role when enabled for your tenant

   • Access identical to job title

   • Choose custom access

5. Use Browse to select changes in the relevant categories:

   • Connections to grant and Resources to grant

   • Connections to revoke and Resources to revoke

6. Select the target identity for each integration affected by a grant. If no identity exists, complete that part in the BalkanID web app.

7. Select a reason. Choose Other to enter a custom reason.

   
8. Review the Confirm screen and select Submit.

The Confirm screen summarizes every change. Select Back to edit before submission.

Reviewers are assigned automatically. Use Reassign on the review afterward to change a reviewer.

Reasons

Select one of these reasons:

• Need to perform current job duties

• Moving roles within current team

• Moving roles outside of current team

• Other

Subject consent

Your tenant can require the request subject's consent. The subject is the person receiving the access.

The subject must grant consent before reviewers receive the request. Denying consent closes the request permanently. Consent is skipped for self-requests.

This can apply to classic and purpose access requests.

What happens next

After submission, you receive a confirmation in the app's Messages tab in Slack. Reviewers receive notifications as their approval tier becomes active.

After a classic request is approved or denied, the requester and subject receive a completion notification.