Access Request Catalog

Instructions for requesting, tracking, and managing access in Veza, for yourself or on behalf of someone else

Overview

You can use the Catalog in Veza Access Hub to:

• Request access to applications, entitlements, and resources

• Track the status of your pending requests

• View your access request history

• Revoke access when it's no longer needed

Requestors and Beneficiaries

In Veza, there are two key roles in the access request process:

• Requestor: The person who creates and submits the access request

• Beneficiary: The person who will receive the access being requested

In many cases, you'll be both the requestor and the beneficiary (requesting access for yourself). However, Veza also supports scenarios where you request access on behalf of someone else, in which case you are the requestor, and they are the beneficiary.

Understanding Access Expiration

Time limited just-in-time (JIT) access will automatically expire after the specified duration. You can view the expiration date in the request details. If you need to extend the access, you'll need to submit a new request.

Accessing the Catalog

To browse the Access Request Catalog:

1. Log in to Veza

2. Click Access Hub on the main Veza navigation sidebar

3. Select Catalog from the navigation menu

The Access Request > Catalog page includes three tabs you can use to request access and manage pending requests:

• Catalog: Browse available applications and bundles. Users with admin role can view all applications and bundles within the organization; while users with non-admin roles can only view the applications and bundles available for them.

• Requests: For end users, view the status of requested apps and bundles.

• Assigned Requests: For end users, review requests assigned to you for approval

Browsing the Catalog

Use the Access Hub > Catalog page to browse the apps you can request access to.

• Click on a requestable item to view more details, such as the related entitlements and description.

• Search apps or filter by type, integration, owner, or labels

• Catalog tiles represent either applications (individual apps you can request access to) or access profiles (pre-configured bundles of entitlements across one or more applications). Click on any tile to see the specific entitlements included.

You can switch between views using the toggle in the top-right corner of the catalog. The catalog interface offers two viewing modes:

• Card View: Shows access profiles as visual cards, including the name, description, and labels. Useful for browsing available options.

• Table View: Presents access profiles in a tabular format with additional details, including entitlements. Useful for comparing multiple profiles.

Filtering and Searching

To find specific access:

• Search: Enter keywords to search by name or description

• Type: Filter by apps (individual applications) or bundles (access profiles)

• Status: Filter by request status (available, pending, assigned, or birthright)

• Popular: Show only popular or recommended access profiles

• Integration: Filter by the specific system or application (e.g., Snowflake, AWS, Okta)

• Labels: Filter by assigned labels (e.g., department, function)

• Owner: Filter by apps owned by you or another user

Viewing Access Request Details

To view detailed information about an access profile:

1. Click on a profile card or row in the table

2. The details panel will show extra information to help you understand what access you're requesting and what approvals will be required, including any:

   • Description

   • Included entitlements

   • Related resources

   • Access duration options

   • Approval requirements

Submitting Access Requests

Standard Access Request (For Yourself)

1. Click on the desired profile in the catalog to open the sidebar

2. Click Request in the sidebar

3. In the request form:

   • Request for: Verify that the request is for the intended user account

   • Explanation: Choose a reason from the dropdown (required)

   • Comments: Add additional context or justification (required)

   • Duration: For temporary (just-in-time) access, select a preset duration or choose Other to specify a custom duration

4. Click Request Bundle or Request App (depending on the item type) to submit the request

After requesting access, a notification will indicate that your request is being processed, and the tile will be removed from the catalog. You can review the status on the Catalog > Requests tab.

Requesting Access on Behalf of Others

If you have permission to request access for others:

1. Click the desired profile in the catalog to open the sidebar

2. Click Request in the sidebar

3. In the request form:

   • Request for: Select the person who needs the access (the beneficiary)

   • Explanation: Choose a reason from the dropdown

   • Comments: Enter a business justification explaining why this person needs the access

   • Duration: Select the appropriate access duration if JIT is configured

4. Click Request Bundle or Request App to submit

Just-in-Time (JIT) Access Request

For time-limited access:

1. Follow the steps for a standard access request

2. Under Duration, select a preset option (One Hour, One Day, One Week, Never Expires) or choose Other to specify a custom duration

3. If you selected Other, enter a numeric value and select the time period (Hours, Days, Weeks)

4. Click Request Bundle or Request App to submit

Note: The available duration options and your ability to customize the duration may be restricted by the Access Request Policy associated with the access profile. Some policies enforce specific duration limits or require administrator-defined presets.

Tracking Your Requests

Use the Access Hub > Requests page to check the status of requested apps or bundles of entitlements.

The requests you can see depend on your role and relationship:

• Requests you created (as the requestor)

• Requests where you are the beneficiary (someone requested access for you)

• Requests you are designated to approve (if you are an approver)

• All requests (if you are an administrator)

Viewing Request Status

To check the status of your requests:

1. Navigate to Access Hub > Requests

2. Choose the Pending or Completed tab

3. View all your current and historical requests with their status:

   • Initial: Request created but not yet submitted for approval

   • Waiting for Approval: Awaiting approver action

   • Needs More Information: Requires additional information from you

   • Plan Selected: Access plan has been selected and is being prepared for implementation

   • External Running: Request is being processed by an external system

   • Completed: Successfully fulfilled

   • Rejected: Denied by approvers

   • Canceled: Withdrawn by you

   • Errored: Failed during implementation

   • JIT Revoked: Time-limited access has been automatically revoked after expiration

4. You can filter either tab to find requests by type, apps, status, or the requestor/beneficiary.

Viewing Request Details

To view more information about a request:

1. Click on any request from your list

2. The details panel will include:

   • The request status

   • The request duration (Permanent or time-limited)

   • The user who requested access

   • The user the request is for

   • The request date

   • Users needed for approval

Click the "expand" icon in the details sidebar to view details in full screen. In this view, you can choose a tab to get more information:

• History: Any changes to the request, including the action, message, and current/previous state

• Events: Associated lifecycle management events, with options to filter by failed events, event type, or date

• Access Plan: Summary of actions performed, including the action type and status

• Entitlements: Details about the requested app entitlements. This includes the source app name (e.g., Active Directory), entitlement (e.g., ActiveDirectoryGroup), and entitlement actions (e.g., view related entitlements)

Managing Active Requests

Responding to Information Requests

If an approver requests more information:

1. You'll receive a notification

2. Navigate to Access Hub > Requests and locate the request marked Needs More Information

3. Click on the request to view what information is needed

4. Enter the requested details

5. Resubmit the request

Canceling Requests

To cancel a pending request:

1. Navigate to Access Hub > Requests

2. Locate the request you want to cancel

3. Choose Cancel Request from the row actions

4. Confirm the cancellation

Managing Your Access

Viewing Your Access

To view your current access:

1. Navigate to Access Hub > My Team

2. Click View My Access

3. Click on any resource to view more information about specific resources you have access to

Revoking Access

To revoke access that you no longer need:

1. Navigate to Access Hub > Requests

2. Locate the completed request for the access you want to revoke

3. Choose Revoke Access from the actions menu

4. Provide a reason for the revocation

5. Confirm the revocation

Related Documentation

• Access Hub Overview: Introduction to Access Hub features

• Access Hub Configuration: Administrator setup guide

• Access Profiles: Creating and managing access profiles

• Lifecycle Management: Policy-driven automation