# The Manager Attribute in Access Flows

## Overview

Some access policies, especially around sensitive access, customer data, production access or high environments and strong permissions, require manager approval for the user requesting access.

Apono supports this use case out-of-the-box, by automatically syncing the manager attribute from your IdP.

Then, all you have to do is set the Access Flow approver to Manager, and that's it! Apono continuously refreshes it's IdP data, so when managers change in the organization, so does Apono's Access Flows.

## How It Works

### In the Apono Admin Portal

1. Integrate your IdP with Apono. Read more [here](/docs/additional-integrations/identity-providers.md).
2. Create a new Access Flow or edit an existing one.
3. Replace "Automatic" approval with "Manager" approval:

![](https://files.readme.io/c081d0a-Screenshot_2023-06-01_at_11.21.13.png)

4. That's it! Managers will now be required to approve access requests before access is granted to the user.

### When requesting access

1. End users who need access to resources can create an access request in [Slack](/docs/access-requests-and-approvals/slack/requesting-access-with-slack.md), [Teams](/docs/access-requests-and-approvals/teams/requesting-access-with-teams.md), or [CLI](/docs/access-requests-and-approvals/cli/requesting-access-with-cli.md).
2. Once the request is submitted, if the Access Flow is set for Manager approval, the user's manager will get a notification to approve the access:

<figure><img src="/files/YJZU0KlMHjBJ3GFzfDWD" alt="" width="355"><figcaption></figcaption></figure>

3. The manager can review the request and decide whether to approve or reject it.
4. If the manager approves the access request, the requester will receive another message with the access details and instructions on how to log in to the requested resource.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.apono.io/docs/additional-integrations/identity-providers/the-manager-attribute-in-access-flows.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.