title: Requesting Access category: Access Catalog tags: access-request, workflow, approval, tracking priority: Normal

Requesting Access

This guide walks end users through the process of requesting access to resources through the IdentityCenter Access Catalog. The catalog provides a self-service portal where you can browse available resources, submit requests with justification, and track the status of your requests through the approval process.

Prerequisites

Before requesting access, ensure that:

• You have an active IdentityCenter account (authenticated via your organization's identity provider)
• Your identity has been synced from Active Directory
• The resource you need is published in the Access Catalog

Step 1: Browse or Search for a Resource

Using the Search Bar

1. Navigate to /catalog
2. Type the name of the resource, application, or group you need in the search bar
3. Results update as you type, showing matching resources across all categories

Browsing by Category

1. From the catalog home page, select a category tile (e.g., IT Infrastructure, Applications, Security)
2. Browse the resources within that category
3. Use the filters on the left sidebar to narrow results:

Tip: Use the "Availability" filter to hide resources you already have access to. This keeps the catalog focused on what you can actually request.

Step 2: View Resource Details

Click on any resource to open its detail page. Review the following information before requesting:

Understanding Risk Levels

Step 3: Submit an Access Request

1. From the resource detail page, click Request Access
2. Fill in the request form:

Writing an Effective Justification

A well-written justification speeds up the approval process. Include:

• What you need the access for -- Describe the specific task, project, or responsibility
• Why you need it now -- Explain the business context or deadline
• How long you will need it -- If temporary, state the expected duration

Good example:

I need access to the Azure DevOps Admin group to manage build pipelines for the Q1 2026 infrastructure migration project. This project runs through March 2026. My manager Bob Jones has confirmed this requirement.

Poor example:

I need this access for my job.

3. Click Submit Request
4. A confirmation message appears with your request tracking number

Step 4: What Happens Next

After submission, your request enters the approval workflow assigned to that resource.

Approval Flow

[You Submit Request]
        |
        v
[Workflow Triggered]
        |
        v
[Approver 1 Notified] --> Approve --> [Approver 2 Notified] --> Approve --> [Provisioned]
        |                                      |
        v                                      v
     Deny --> [You Are Notified]            Deny --> [You Are Notified]

What Approvers See

Approvers receive an email notification with:

• Your name and department
• The resource you requested
• Your justification
• The resource risk level
• A link to approve or deny the request

Approvers may also add comments explaining their decision, which are visible to you on the MyRequests page.

Step 5: Track Your Request

MyRequests Page

Navigate to /catalog/my-requests to see all of your access requests.

Request Statuses

Request Detail View

Click on any request to see:

• Current Step -- Which approver is currently reviewing
• Approval History -- Decisions made by each approver with timestamps
• Comments -- Approver comments and notes
• Timeline -- Visual timeline showing the request's journey through the workflow
• SLA Status -- Whether the request is within or approaching its SLA deadline

What to Do if Your Request is Denied

If an approver denies your request:

1. Read the denial reason -- Open the request detail to see the approver's comment
2. Address the concern -- If the denial was based on insufficient justification, prepare a stronger one
3. Resubmit -- Click Resubmit on the denied request to create a new request with updated information
4. Contact your manager -- If you believe the denial was in error, discuss with your manager before resubmitting
5. Request an alternative -- If the specific resource was denied, check if a lower-privilege alternative exists in the catalog

Common Denial Reasons

Request Expiration and Renewal

Time-Limited Access

Some resources are configured for time-limited access. When your access is approaching its expiration:

1. You receive a notification 7 days before expiration
2. Navigate to MyRequests and find the expiring access
3. Click Renew to submit a renewal request
4. Provide updated justification for continued access
5. The renewal goes through the same approval workflow

Renewal vs. New Request

Requesting on Behalf of Others

Managers can submit requests on behalf of their direct reports:

1. Navigate to the catalog
2. Select the resource
3. Click Request for Another User
4. Select the team member from your direct reports
5. Provide justification
6. Submit the request

The approval workflow proceeds as normal, with the manager noted as the requester on behalf of the end user.

Best Practices

1. Search before requesting -- Verify you do not already have the access through an existing group or role
2. Write detailed justifications -- Reduce back-and-forth and denial rates with clear explanations
3. Request only what you need -- Follow the principle of least privilege
4. Monitor your requests -- Check MyRequests regularly for updates or required actions
5. Renew proactively -- Do not wait until the last day to renew expiring access
6. Relinquish unused access -- If you no longer need access, remove it before the next review

Next Steps

• Access Catalog Overview -- Understand the full catalog system
• Business Roles -- Learn about bundled role-based access
• Workflow Designer -- How approval workflows are built
• Escalation & SLA Tracking -- What happens if approvers are slow
• Access Reviews Overview -- Periodic review of your granted access