Request privileged access (My access)

When your organization uses privileged access management, server and database admin accounts are not shared: you request access to an account for a limited time, someone approves (if the profile requires it) and access ends on its own.

Where do I request access?

In the console, open the «Access» area › «My access». It has three sections:

• «Accounts you may request»: the privileged accounts your profile lets you request.
• «My requests»: the status of each request.
• «Active leases»: access in progress.

How do I make a request?

1. Under «Accounts you may request», choose «Request» on the account.
2. In the «Request access» dialog, fill in:
   • «Kind»: «Recorded session» (you work through the terminal and everything is recorded), «Credential checkout» (you see the password), «Temporary access» (a temporary account created just for you).
   • «Duration (minutes)»: from 1 minute to the profile's maximum.
   • «Justification»: why you need access.
   • «Ticket (optional)»: the ticket number in your support system.
3. Choose «Send request». «Request sent.» appears.

What next?

• If the profile requires no approval, the request becomes «Approved» at once.
• Otherwise it stays «Waiting for approval» until the approvers decide.
• When it is «Approved», choose «Activate» and confirm with your passkey. The access appears under «Active leases».

Every activation, reveal and decision asks for your passkey: «Each activation, reveal and decision asks for your passkey: it signs exactly this request.»

How do I use the access?

• Recorded session: «Open web terminal» or «Copy the connection command». See Web terminal and SSH command.
• Checkout: «Reveal» shows the credential for 30 seconds.
• When you finish, choose «Release». Some accounts rotate their password on check-in.

Messages