Create Access Request
Create an access request for a role. The request will go through the configured approval flow before access is provisioned.
Authentication and permissions
Token requirements: User-based token (OAuth) or Organization-scoped API key or Workspace-scoped API key. Send a bearer access token for one of these identities. The permissions and resource restrictions below also apply.
- Attach to an existing ticket: With ticket_id, the ticket must belong to the requested workspace and be visible to you.
- Attach to your own ticket: With ticket_id, you must be the ticket’s requester and the request must be for yourself. Not available for system-created tickets or tickets restricted to their workspace.
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Body
The ID of the workspace. Required.
The ID of the role (entitlement) to request access for. Required.
The ID of the user to request access for. Defaults to the authenticated user if omitted.
The duration of access in minutes. Must not exceed the role's max_access_minutes. Required unless the role has no maximum duration.
A business justification for the access request. Required if the role's access policy requires justification.
An optional scheduled start time for provisioning (RFC3339 format). If omitted, access is provisioned immediately upon approval.
The ID of an existing ticket on the same workspace to attach the access request to. If omitted, a new ticket is created for the access request.
Response
Success
The created access request.

