Request access on user behalf

Triggers an access request for the specified policy on behalf of the user identified by userEmail.

The policy's approval flow runs first, and its provisioning workflow runs once the request is approved.

For temporary access, a deprovisioning workflow runs automatically when the requested duration ends.

Eligibility is enforced: the request fails with 400 NOT_ELIGIBLE_FOR_POLICY if the user is not a member of the policy’s eligibility groups.

  • Rate limit: 60 requests per minute

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Path Params
integer
required
Body Params
string
required

Request access on behalf of this user

string
length ≤ 256

The license type the user asked for, if they named one

string

The reason the user is requesting access to the app.

requestedAccessDuration
object

Requested access duration — how long the user should have access to the app.

  • Optional by default — omit it to request permanent access.
  • Required only when the policy allows temporary access exclusively (i.e. permanent access is disabled).
  • value above 99 is accepted only when it matches one of the policy's duration options; a custom duration is at most 99.
Responses

Language
Credentials
Header
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json