Self Serve Access Flows

Self serve access flows grant access to a resource based on a user request for a defined time period.

This access flow type is best used for sensitive or highly regulated resources, such as access to production. It also suits just-in-time (JIT) or break-glass access cases.

To create a self serve access flow, you must define the permitted requestors, available resources, and approvers.

Prerequisites

Define permitted requestors

Follow these steps to define the permitted requestors:

1. On the Access Flows page, click Create Access Flow. The Create Access Flow page appears.

2. (Optional) Configure Settings.

3. Click Self Serve. The Self Serve fields appear below.

4. Enter an alphanumeric, user-friendly Access Flow Name.

5. Click When. A settings window appears to set the access period.

6. Set the access period.\
7. Click Select attribute to select an IdP attribute, such as User or Group.

8. (Optional) Click is to select conditional logic from the menu options.

1. Click Select value to select one or multiple users or groups from the menu options. This selection determines who is permitted to request access.

2. (Optional) Add another condition.

   1. Under the last listed requestor, click +. A new row appears.

   2. Repeat steps 7-10.

   3. Select the conditional logic for the multiple requestors.\

Define the resource

Integrations

You can define access to specific resources in an Apono integration.

Follow these step to define access to specific resources:

1. Under They will have access to, click Select target > Integrations.

2. Select an integration. The Select resource type panel appears.

3. Select the resource type.

4. Click Done. The panel closes.

5. Click permissions. The Permissions menu appears.

6. Select one or more permissions to grant the requester.

7. (Optional) Refine the available resources:

   1. Click in the populated to field. A list of resources appears.

   2. Select one or several resources.

1. (Optional) Add another target:

   1. Click + at the end of the row. A new target row appears.

   2. Repeat steps 1-7.

Bundles

You can define access to a specific bundle.

Follow these steps to define access to a specific bundle:

1. Click Select target > Bundles.

2. Select a bundle.

3. (Optional) To add another bundle, click +. A new target row appears.

4. Repeat steps 1-2.

Set access duration and approval process

Follow these steps to define the duration of access:

1. Click in the populated Grant for field. The granting period settings appear.\
2. Click Automatic to select the approval type.\
3. Click Create Access Flow.

Set up custom approval

Approval of provides in-depth options to customize the approval flow. This approval type is ideal for production environments and highly sensitive resources.

Follow these steps to set up Approval of:

1. Click the populated with field. The approval type menu appears.

2. Click Approval of. The Approval of fields appear.

3. Click Select attribute to select an IdP attribute, such as User, Group, or Owner.

1. (Optional) Click is to select conditional logic from the menu options.

1. Click Select value to select one or multiple users or groups from the menu options. This selection determines who is permitted to approve access.

2. (Optional) Add another approver condition.

   1. Immediately beneath the last list approver, click +. A new row appears.

   2. Repeat steps 3-5 to add another approver to the group.

   3. Select the conditional logic for the multiple approvers.\
3. (Optional) Add another approver group.

   1. Beneath the last approver group, click +. A new approval group appears.

   2. Repeat steps 3-6 to add another approver to the group.

   3. Select the conditional logic for the multiple groups of approvers.\