> For the complete documentation index, see [llms.txt](https://docs.balkan.id/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.balkan.id/lifecycle-management/access-requests/new-user-access-request.md).

# New user access request

With BalkanID, any team member can request access for themselves or for others to any support application integration. Requests can be either GRANT (provisioning) or REVOKE (de-provisioning). GRANT requests can be permanent or temporary (specified by end time, when the access is automatically de-provisioned). 

By default, every access request goes through a review process. Upon successful approval of the access request (by the assigned reviewer - either manager or application owner or whoever is assigned as the designated reviewer), the request shall get fulfilled immediately (either provisioned or de-provisioned, depending on whether its a GRANT or REVOKE request).

If the fulfillment option for an application integration is selected to be direct integration and auto approved provisioning, then a request GRANT shall automatically result in provisioning of the request in the respective application. Similarly, a request REVOKE shall automatically result in de-provisioning of the request in the respective application. All of these are event driven, which means the provisioning/de-provisioning act happens immediately.  

### Access request identical to a User (get access similar to another team member) <a href="#h_01hq7rnahn2d32kh4c3xc08c8h" id="h_01hq7rnahn2d32kh4c3xc08c8h"></a>

This will request access that is identical to a different target user.

<figure><img src="/files/Q4yoyCUjV0Bft8manvP2" alt=""><figcaption></figcaption></figure>

### Access request identical to a Job Title

This will request access that is identical to the access that users with the target job title have in common.

<figure><img src="/files/KIUOI22uviCaXbys6L6G" alt=""><figcaption></figcaption></figure>

### Access request identical to a Role  <a href="#h_01hq7rnahn2d32kh4c3xc08c8h" id="h_01hq7rnahn2d32kh4c3xc08c8h"></a>

This will request access that is identical to the access given by the target role.

<figure><img src="/files/DPAaRwL6W9JEJNQMuT9Q" alt=""><figcaption></figcaption></figure>

### Access request identical to Custom

This allows the requester to chose the exact access changes they wish to apply to the user, including both GRANTs and REVOKEs. Both GRANTs and REVOKEs can be present in the same request.

<figure><img src="/files/CVqvTBje32cWQgq8HxGl" alt=""><figcaption></figcaption></figure>

<figure><img src="/files/QZIWvQesb7lgHRzYuDyP" alt=""><figcaption></figcaption></figure>

### Select the identities that should be provisioned or de-provisioned

<figure><img src="/files/rdoJKQBS5XP0nYE1a2CE" alt=""><figcaption></figcaption></figure>

If an identity for an employee does not exist in an application, BalkanID will automatically create a new identity, corresponding to the access request. If a selected identity is suspended, it will be re-activated and subsequently provisioned or de-provisioned with the requested changes.

### Preview the request

Before you submit you're request, you will be presented with a summary of the request details as well as the requested access changes. Once you submit the request, it will be created and be ready for review.

<figure><img src="/files/bc04Qg8UTrpFqlXKQeIo" alt=""><figcaption></figcaption></figure>

Users, Risk managers and IT administrators can view the list of access requests they have created, along with their progress on the BalkanID dashboard.

<figure><img src="/files/GBXHQ8UEpUxRa10rg8vS" alt=""><figcaption></figcaption></figure>

Users, Risk managers and IT administrators can view the list of completed access requests on the BalkanID dashboard. <br>

<figure><img src="/files/QcX7B0hWxZVYOw4kbmDg" alt=""><figcaption></figcaption></figure>

The full audit trail of an access request, starting from creation till the provisioning or de-provisioning is recorded within BalkanID and available to be viewed or downloaded as a report anytime, for audit purposes.

**Note:** You may see different completion percentages in your *My Tasks* tab and *Access Requests* tab for multi level reviews. My Tasks will reflect how much of the actions needed to be taken by you, are completed for a given access request. Whereas Access Requests shows how many total actions by all the reviewers for an Access Request are completed for a given Access Request.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.balkan.id/lifecycle-management/access-requests/new-user-access-request.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.