# Access requests with Slackbot

### **Creating Access Requests with the BalkanID Slackbot**

The BalkanID Slackbot empowers any team member to request access to applications and resources directly within Slack. This guide explains how to create different types of access requests, ensuring you can get the tools you need efficiently while maintaining security through a standard approval process.

If the BalkanID Slackbot isn't set up for your tenant, please refer to [setting-up-balkanid-slackbot](https://docs.balkan.id/getting-started/balkanid-slackbot/setting-up-balkanid-slackbot "mention") to enable it.

All requests are for **GRANT** access (provisioning) and can be either **Permanent** or **Temporary**. Temporary requests require an end date, after which the access will be automatically de-provisioned.

Every request is sent for review to the designated approver (such as a manager or application owner). Once approved, access is fulfilled immediately.

#### **Getting Started: The BalkanID Home Tab**

The **Home** tab of the BalkanID Slackbot is your starting point for all access requests. It displays your basic user information from BalkanID and features the primary action button.

* **To begin**, navigate to the BalkanID app in Slack and click on its **Home** tab.
* Click the **Request Access** button to open the access request form.

  <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FGDL6hiDb2Uz68cqr8qhH%2Fimage.png?alt=media&#x26;token=b2452a54-40d6-4f28-a96f-0ef32fd1a32d" alt=""><figcaption></figcaption></figure>

#### **How to Request Access**

You can request access in three flexible ways, depending on your needs.

**Option 1: Request Access Like Another Person**

This is the easiest way to request access if you need the same permissions as a colleague.

1. **Select a Team Member:**\
   In the access request form, under the "Access Like" section, ensure **Person** is selected. From the dropdown menu, choose the team member whose access you wish to mirror.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FPhr7Z4v6k8AdwLCNe81Q%2Fimage.png?alt=media&#x26;token=e3b2079d-657b-450d-b5e2-5c0bac6fe9b0" alt="" width="375"><figcaption></figcaption></figure>

2. **Choose Access Grants:**\
   The "Access Grants" field will now list all the connections that your selected colleague has, but you do not. You can either:

   1. Check the boxes for a few specific access grants.
   2. Check the **Select all access grants** box to request all of them.

   <div align="center"><figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FHacx1Q9FgDNgm4HnMQwD%2Fimage.png?alt=media&#x26;token=cee44670-0cf5-461b-88f1-32a4b43cc6d9" alt="" width="375"><figcaption></figcaption></figure></div>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2F4jqWSqY1z2PeMvxkmmz4%2Fimage.png?alt=media&#x26;token=5e1246ad-18af-4179-ad3c-4299333d050a" alt="" width="375"><figcaption></figcaption></figure>

3. **Identity Selection**\
   Choose which identities to provision access to based on the access selections from various integrations.\
   If no identities are available for the selected access from certain integrations, the modal will prompt you to create the request in the BalkanID App, as identity creation through the user access request flow is currently not supported via the Slackbot.\ <br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2Frw4UUOWClv8wQaVGoNPS%2Fimage.png?alt=media&#x26;token=dcf0083d-d32c-4cd1-b13f-4804ace525ad" alt="" width="375"><figcaption></figcaption></figure>

   <br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FAQgZzH2gAZJCIJuaqrph%2Fimage.png?alt=media&#x26;token=0d8187a3-d929-4827-b6ef-82d7ef0157d7" alt="" width="375"><figcaption></figcaption></figure>

4. **Set the Duration:**\
   Choose how long you need the access:
   1. **Permanent Access:** The access will not expire and has to be manually revoked.
   2. **Temporary Access:** Temporary access is now supported through [JITPBAC](https://docs.balkan.id/lifecycle-management/jitpbac), and the Slackbot redirects users to create a [purpose request](https://docs.balkan.id/lifecycle-management/jitpbac/purposes/create-user-purpose-access-request).<br>

      <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FpgTtDztsPUva7gpdNW6h%2Fimage.png?alt=media&#x26;token=9869ee9c-78a5-4b61-a334-9cc000554b1c" alt="" width="375"><figcaption></figcaption></figure>

      <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2Fm6wzuJmUGSmbHncL6soD%2Fimage.png?alt=media&#x26;token=043f3145-ed2f-4f5c-a642-843f0925370e" alt="" width="375"><figcaption></figcaption></figure>

5. **Provide a Reason and Submit:** \
   Select a justification from the "Reason" dropdown menu and click **Submit**.<br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FWuYuYPP21kYhPOwVTFa1%2Fimage.png?alt=media&#x26;token=372680e1-4d35-4650-9398-c05f455219c5" alt="" width="375"><figcaption></figcaption></figure>

**What Happens Next?**

You will receive a confirmation notification in the Slackbot's "Messages" tab, letting you know that your request has been successfully created and sent for approval.

<figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FQl3cjv4RwTSFo1gyQlUH%2Fimage.png?alt=media&#x26;token=e4e0cf2b-69d5-40c1-989f-ecbb6a51bcc0" alt=""><figcaption></figcaption></figure>

***

**Option 2: Request Access Based on a Job Title**

Use this option to request a standard set of permissions associated with a specific role in your organization.

1. **Select a Job Title:**\
   In the "Access Like" section, select **Job Title**. From the dropdown menu, choose the job title whose standard access you need.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FYsPlOie5EC9e8M6LZ3mI%2Fimage.png?alt=media&#x26;token=cae06129-472e-4a84-96c5-079f6a9151c5" alt="" width="375"><figcaption></figcaption></figure>

2. **Choose Access Grants:**\
   The "Access Grants" field will now list all the connections that your selected job title has, but you do not. You can either:

   1. Check the boxes for a few specific access grants.
   2. Check the **Select all access grants** box to request all of them.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2Fo1XBqRkFbVHXRwWAiLww%2Fimage.png?alt=media&#x26;token=2e7a2cb1-dd3b-4032-b437-d9e0aee09992" alt="" width="375"><figcaption></figcaption></figure>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FXNjg8agJRa3drAFWcjrb%2Fimage.png?alt=media&#x26;token=4289eda1-22f7-4a6d-b6d5-9a8dd4662d80" alt="" width="375"><figcaption></figcaption></figure>

3. **Identity Selection**\
   Choose which identities to provision access to based on the access selections from various integrations.\
   If no identities are available for the selected access from certain integrations, the modal will prompt you to create the request in the BalkanID App, as identity creation through the user access request flow is currently not supported via the Slackbot.\ <br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FOx2QLmRacBetvEhUsgHy%2Fimage.png?alt=media&#x26;token=eb4ffecb-daeb-40c9-aff0-49d35cbef2a7" alt="" width="375"><figcaption></figcaption></figure>

4. **Set the Duration:**\
   Choose how long you need the access:
   1. **Permanent Access:** The access will not expire and has to be manually revoked.
   2. **Temporary Access:** Temporary access is now supported through [JITPBAC](https://docs.balkan.id/lifecycle-management/jitpbac), and the Slackbot redirects users to create a [purpose request.](https://docs.balkan.id/lifecycle-management/jitpbac/purposes/create-user-purpose-access-request)<br>

      <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FjhKX9yCCrmeCeC8DVZr5%2Fimage.png?alt=media&#x26;token=987ae8ef-0e32-4b12-a1e3-d58a9fe6628c" alt="" width="375"><figcaption></figcaption></figure>

      <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FiEhWNaJXQOqdJIKshs0i%2Fimage.png?alt=media&#x26;token=c9d683c6-d8b2-4d34-81a6-cec2dffec199" alt="" width="375"><figcaption></figcaption></figure>

5. **Provide a Reason and Submit:** \
   Select a justification from the "Reason" dropdown menu and click **Submit**.<br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FEDgHUqgfxLIKNQ7ypZQ1%2Fimage.png?alt=media&#x26;token=79dc3747-124e-43a1-a140-ca415bc9509b" alt="" width="375"><figcaption></figcaption></figure>

**What Happens Next?**

You will receive a confirmation notification in the Slackbot's "Messages" tab, letting you know that your request has been successfully created and sent for approval.

<figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FXe19FyB3bC4cuIjHmoiF%2Fimage.png?alt=media&#x26;token=501d4c6b-0f9b-4367-bbdb-79c938a253a6" alt=""><figcaption></figcaption></figure>

***

**Option 3: Request Custom Access**

If your needs don't align with a person or job title, you can browse a full list of available permissions and build a custom request.

1. **Select Custom** In the "Access Like" section, select the **Custom** option.<br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FtohH4Rr47ao1HS6yHEHK%2Fimage.png?alt=media&#x26;token=609752b1-8c98-456b-9181-5dcb71038879" alt="" width="375"><figcaption></figcaption></figure>

2. **Choose Access Grants** The "Access Grants" field will display all available access options that you do not currently have. You can browse and select one or more specific permissions.

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2Fr3QLn6bShKkNh738z0uM%2Fimage.png?alt=media&#x26;token=fbdc1d85-a6a5-4fd0-b844-89ec22600e16" alt="" width="563"><figcaption></figcaption></figure>

3. **Identity Selection**\
   Choose which identities to provision access to based on the access selections from various integrations.\
   If no identities are available for the selected access from certain integrations, the modal will prompt you to create the request in the BalkanID App, as identity creation through the user access request flow is currently not supported via the Slackbot.<br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FoQ2H816qCoY4phcVvrSl%2Fimage.png?alt=media&#x26;token=9fcd04a5-7ee1-44d4-bb49-fcee1a9e6cd0" alt="" width="375"><figcaption></figcaption></figure>

4. **Set the Duration:**\
   Choose how long you need the access:\
   a.  **Permanent Access:** The access will not expire and has to be manually revoked.\
   b.  **Temporary Access:** Temporary access is now supported through [**JITPBAC**](https://docs.balkan.id/lifecycle-management/jitpbac), and the Slackbot redirects users to create a [purpose request](https://docs.balkan.id/lifecycle-management/jitpbac/purposes/create-user-purpose-access-request).<br>

   <figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2FUK6cTzmdTKQxQ1KlaiUP%2Fimage.png?alt=media&#x26;token=30d5f2c5-7e1f-4312-803e-5d145c461380" alt="" width="375"><figcaption></figcaption></figure>

5. **Provide a Reason and Submit:**\
   Select a relevant reason from the dropdown and click the **Submit** button.

<figure><img src="https://2975852473-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FbVGYwk8aSk5yI1GDPEW9%2Fuploads%2F5n2VHuvrknPMIPi5UmKN%2Fimage.png?alt=media&#x26;token=854442c3-dc7f-4a9a-bf93-c90103aecd3b" alt="" width="563"><figcaption></figcaption></figure>

**What Happens Next?**

A confirmation notification will be sent to you via the Slackbot, confirming that your custom request has been submitted for approval.
