# Access Request Catalog

## Overview

You can use the Catalog in Veza Access Hub to:

* Request access to applications, entitlements, and resources
* Track the status of your pending requests
* View your access request history
* Revoke access when it's no longer needed

### Requestors and Beneficiaries

In Veza, there are two key roles in the access request process:

* **Requestor**: The person who creates and submits the access request
* **Beneficiary**: The person who will receive the access being requested

In many cases, you'll be both the requestor and the beneficiary (requesting access for yourself). However, Veza also supports scenarios where you request access on behalf of someone else, in which case you are the requestor, and they are the beneficiary.

### Understanding Access Expiration

Time limited just-in-time (JIT) access will automatically expire after the specified duration. You can view the expiration date in the request details. If you need to extend the access, you'll need to submit a new request.

## Accessing the Catalog

{% hint style="info" %}
The Catalog is only visible to users who meet all of the following conditions:

* Access Requests is enabled for the organization
* The user appears in an identity source connected to a Lifecycle Management policy (e.g., they exist in Okta or your HRIS system that the policy syncs from)
* The Catalog page is enabled in **Access Hub** > **Settings** > **Pages**

If you don't see Catalog in the navigation sidebar, contact your Veza administrator to verify these requirements.
{% endhint %}

To browse the Access Request Catalog:

1. Log in to Veza
2. Click **Access Hub** in the Products section of the navigation sidebar
3. Select **Catalog** from the navigation sidebar

The Access Hub **Catalog** section includes three pages you can use to request access and manage pending requests:

* **Catalog**: Browse available applications and bundles. Users with admin role can view all applications and bundles within the organization; while users with non-admin roles can only view the applications and bundles available for them.
* **Requests**: For end users, view the status of requested apps and bundles.
* **Assigned Requests**: For end users, review requests assigned to you for approval

## Browsing the Catalog

Use the **Access Hub** > **Catalog** page to browse the apps you can request access to.

* Click on a requestable item to view more details, such as the related entitlements and description.
* Search apps or filter by type, integration, owner, or labels
* Catalog tiles represent either applications (individual apps you can request access to) or access profiles (pre-configured bundles of entitlements across one or more applications). Click on any tile to see the specific entitlements included.

You can switch between views using the toggle in the top-right corner of the catalog. The catalog interface offers two viewing modes:

* Card View: Shows access profiles as visual cards, including the name, description, and labels. Useful for browsing available options.
* Table View: Presents access profiles in a tabular format with additional details, including entitlements. Useful for comparing multiple profiles.

### Filtering and Searching

To find specific access:

* **Search**: Enter keywords to search by name or description
* **Type**: Filter by apps (individual applications) or bundles (access profiles)
* **Status**: Filter by request status (available, pending, assigned, or birthright)
* **Popular**: Show only popular or recommended access profiles
* **Integration**: Filter by the specific system or application (e.g., Snowflake, AWS, Okta)
* **Labels**: Filter by assigned labels (e.g., department, function)
* **Owner**: Filter by apps owned by you or another user

### Viewing Access Request Details

To view detailed information about an access profile:

1. Click on a profile card or row in the table
2. The details panel will show extra information to help you understand what access you're requesting and what approvals will be required, including any:
   * Description
   * Included entitlements
   * Related resources
   * Access duration options
   * Approval requirements

## Submitting Access Requests

### Standard Access Request (For Yourself)

1. Click on the desired profile in the catalog to open the sidebar
2. Click **Request** in the sidebar
3. In the request form:
   * **Request for**: Verify that the request is for the intended user account
   * **Explanation**: Choose a reason from the dropdown (required)
   * **Comments**: Add additional context or justification (required)
   * **Duration**: For temporary (just-in-time) access, select a preset duration or choose **Other** to specify a custom duration
4. Click **Request Bundle** or **Request App** (depending on the item type) to submit the request

After requesting access, a notification will indicate that your request is being processed, and the tile will be removed from the catalog. You can review the status on the **Catalog** > **Requests** tab.

### Requesting Access on Behalf of Others

If you have permission to request access for others:

1. Click the desired profile in the catalog to open the sidebar
2. Click **Request** in the sidebar
3. In the request form:
   * **Request for**: Select the person who needs the access (the beneficiary)
   * **Explanation**: Choose a reason from the dropdown
   * **Comments**: Enter a business justification explaining why this person needs the access
   * **Duration**: Select the appropriate access duration if JIT is configured
4. Click **Request Bundle** or **Request App** to submit

### Just-in-Time (JIT) Access Request

For time-limited access:

1. Follow the steps for a standard access request
2. Under **Duration**, select a preset option (One Hour, One Day, One Week, Never Expires) or choose **Other** to specify a custom duration
3. If you selected **Other**, enter a numeric value and select the time period (Hours, Days, Weeks)
4. Click **Request Bundle** or **Request App** to submit

{% hint style="info" %}
**Note:** The available duration options and your ability to customize the duration may be restricted by the Access Request Policy associated with the access profile. Some policies enforce specific duration limits or require administrator-defined presets.
{% endhint %}

## Tracking Your Requests

Use the **Access Hub** > **Requests** page to check the status of requested apps or bundles of entitlements.

The requests you can see depend on your role and relationship:

* Requests you created (as the requestor)
* Requests where you are the beneficiary (someone requested access for you)
* Requests you are designated to approve (if you are an approver)
* All requests (if you are an administrator)

### Viewing Request Status

To check the status of your requests:

1. Navigate to **Access Hub** > **Requests**
2. Choose the **Pending** or **Completed** tab
3. View all your current and historical requests with their status:
   * **Initial**: Request created but not yet submitted for approval
   * **Waiting for Approval**: Awaiting approver action
   * **Needs More Information**: Requires additional information from you
   * **Plan Selected**: Access plan has been selected and is being prepared for implementation
   * **External Running**: Request is being processed by an external system
   * **Completed**: Successfully fulfilled
   * **Rejected**: Denied by approvers
   * **Canceled**: Withdrawn by you
   * **Errored**: Failed during implementation
   * **JIT Revoked**: Time-limited access has been automatically revoked after expiration
4. You can filter either tab to find requests by type, apps, status, or the requestor/beneficiary.

### Viewing Request Details

To view more information about a request:

1. Click on any request from your list
2. The details panel will include:
   * The request status
   * The request duration (Permanent or time-limited)
   * The user who requested access
   * The user the request is for
   * The request date
   * Users needed for approval

Click the "expand" icon in the details sidebar to view details in full screen. In this view, you can choose a tab to get more information:

* **History**: Any changes to the request, including the action, message, and current/previous state
* **Events**: Associated lifecycle management events, with options to filter by failed events, event type, or date
* **Access Plan**: Summary of actions performed, including the action type and status
* **Entitlements**: Details about the requested app entitlements. This includes the source app name (e.g., Active Directory), entitlement (e.g., ActiveDirectoryGroup), and entitlement actions (e.g., view related entitlements)

## Managing Active Requests

### Responding to Information Requests

If an approver requests more information:

1. You'll receive a notification
2. Navigate to **Access Hub** > **Requests** and locate the request marked **Needs More Information**
3. Click on the request to view what information is needed
4. Enter the requested details
5. Resubmit the request

### Canceling Requests

To cancel a pending request:

1. Navigate to **Access Hub** > **Requests**
2. Locate the request you want to cancel
3. Choose **Cancel Request** from the row actions
4. Confirm the cancellation

## Managing Your Access

### Viewing Your Access

To view your current access:

1. Navigate to **Access Hub** > **My Team**
2. Click **View My Access**
3. Click on any resource to view more information about specific resources you have access to

### Revoking Access

To revoke access that you no longer need:

1. Navigate to **Access Hub** > **Requests**
2. Locate the completed request for the access you want to revoke
3. Choose **Revoke Access** from the actions menu
4. Provide a reason for the revocation
5. Confirm the revocation

## Related Documentation

* [Access Hub Overview](/4yItIzMvkpAvMVFAamTf/features/access-hub.md): Introduction to Access Hub features
* [Access Hub Configuration](/4yItIzMvkpAvMVFAamTf/features/access-hub/configuration.md): Administrator setup guide
* [Access Profiles](/4yItIzMvkpAvMVFAamTf/features/lifecycle-management/profiles.md): Creating and managing access profiles
* [Lifecycle Management](/4yItIzMvkpAvMVFAamTf/features/lifecycle-management.md): Policy-driven automation


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.veza.com/4yItIzMvkpAvMVFAamTf/features/access-hub/catalog.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.