> ## Documentation Index
> Fetch the complete documentation index at: https://docs.opal.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Request FAQs

> Learn answers to frequently asked questions for end users requesting access with Opal.

## What is Opal?

Opal is an access management platform that helps organizations securely manage access to resources. As an end user, you'll primarily use Opal to request access to resources, review your existing access, and participate in access reviews.

## How do I request access to assets?

Browse, search, and request access to assets directly from the Opal UI, Slack, or Microsoft Teams.

> [tab] Opal UI
>
> Request access through the **Catalog** or using the **Request Access** button. You can also find apps from the [Search page](https://docs.opal.dev/docs/tips-on-searching.md).
>
> ![](https://mintcdn.com/opalsecurity/CCjTTkaW-43B4efd/images/docs/f48a7b28a6475ab574dbe049ae35c573c2ab8386722a25c71a106dbb7867790c-app-catalog.png?fit=max\&auto=format\&n=CCjTTkaW-43B4efd\&q=85\&s=3fbe13160458a54f1e580b1f4f86f504)
>
> After selecting an app, you can choose **Resources** that you want to request. **Resources** are specific permissions within applications. Example resources include:
>
> * Salesforce: Roles, profiles, and permission sets
> * GitHub: Repositories, Teams
> * Amazon Web Services: IAM Roles, databases (RDS), and compute (EC2)
>
> To make a request, open the resource and select **Request** in the **Actions** column, or select **Request Access** in the sidebar.
>
> ![](https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/bbad1ce426b646425e555d16e671a3072c58823c162a491856708dce01832154-request-access.png?fit=max\&auto=format\&n=lwwIeFbsleftxaXx\&q=85\&s=a13afb38f12c4e9466c718a521675c1d)
>
> Enter the following fields:
>
> * **Reason**: By default, this is a required field. Admins can hide this field using the [request configuration](https://docs.opal.dev/docs/curate-catalog.md) settings. Ensure you include enough context in your reason for your reviewers to approve your request.
> * **Expires in**: Specify how long you need access. Use the default values, or request a custom range by selecting **Custom**.
> * **Expire access when ticket is closed**: If you don't know how long you'll need access, you can bind the access request to a support ticket that is assigned to you. Once the ticket is completed, your access will be automatically revoked.
>
>   ![](https://mintcdn.com/opalsecurity/E-CmJXh0QNjZUl4g/images/docs/5fb2561b02e7b25d1ae74292a0c123fdcd8582e4f07c4274d56311c5fe6625d5-app-catalog-request-modal.png?fit=max\&auto=format\&n=E-CmJXh0QNjZUl4g\&q=85\&s=eebdd825840fbcad1757c3cf2ea61126)
>
> You may request access on behalf of another user. For security reasons, this functionality is limited to the following groups.
>
> * **Opal Admins** can request access on behalf of all users for all resources.
> * **Resource and group admins** can request access on behalf of others for those resources and groups where they are an admin.
> * **Managers** can request access on behalf of their reports for those resources to which the manager has access.

> [tab] Slack
>
> You can navigate Opal assets and submit access requests directly in Slack using the `/opal` slash command.
>
> ### Search for requestable assets (recommended)
>
> Run this search command from any Slack channel to find requestable assets.
>
> `/opal search <term>`
>
> Select an asset from the results to start an access request, or click **View results on web** to see the full list of results on the web UI.
>
> ![Example of the /opal search command in Slack](https://mintcdn.com/opalsecurity/MtuHXQ82QqdFjYBV/images/docs/opal_search_ephemeral_example.png?fit=max\&auto=format\&n=MtuHXQ82QqdFjYBV\&q=85\&s=39cdc4e02e714389f701c260f192bad0)
>
> ### Browse available assets
>
> Run the command by itself to browse assets by App.
>
> `/opal`
>
> ![Image of full request modal in Slack](https://mintcdn.com/opalsecurity/MtuHXQ82QqdFjYBV/images/docs/slack_request_modal.png?fit=max\&auto=format\&n=MtuHXQ82QqdFjYBV\&q=85\&s=b9563aff20ee880cfed6f1a3891299cc)
>
> ### Using `/access` instead
>
> Both commands work identically—use whichever you prefer:
>
> * `/access` (opens browse modal)
> * `/access search <term>` (searches directly)

> [tab] Microsoft Teams
>
> You can search Opal assets and submit access requests from Microsoft Teams with the Opal app. Your organization must have [connected Microsoft Teams](https://docs.opal.dev/integrations/microsoft-teams.md).
>
> ### Search for requestable assets
>
> Run this command in a channel or group chat to find requestable assets. In a 1:1 chat with the Opal bot, you can leave out the slash.
>
> `/Opal search <term>`
>
> Opal shows up to 8 matches. Select **Request** on a match to start an access request.
>
> ### Request access
>
> Run `/Opal request`, or choose **Request access** from the compose box. Search for an asset, select it, and choose **Continue**.
>
> ![Step 1 of the Teams request dialog, searching for an asset to request](https://mintcdn.com/opalsecurity/qRshVqcvyMC1wZin/images/docs/microsoft-teams-request-search.png?fit=max\&auto=format\&n=qRshVqcvyMC1wZin\&q=85\&s=80a852a3655f49622e19b702f10721d6)
>
> Choose a duration, enter a reason, and choose **Submit request**.
>
> ![Step 2 of the Teams request dialog, with duration and reason fields](https://mintcdn.com/opalsecurity/qRshVqcvyMC1wZin/images/docs/microsoft-teams-request-details.png?fit=max\&auto=format\&n=qRshVqcvyMC1wZin\&q=85\&s=3de974fcf1f64c94a1678f7cb5e8294f)

## What happens after my access request?

Once approved, you'll be notified over email and in Slack or Microsoft Teams. Go to **My Access** in the Opal sidebar (or filter by **My Access** in the **Catalog**) to view all resources and groups you currently have access to, extend eligible time-bound access, or forfeit access you no longer need (providing a reason if required by the asset's policy).

If you want to learn more about your request, you can click on the **Access request pending** button in Slack, or go to the **Requests** page in the Opal dashboard.

From here you can:

* See the status of your request
* See who the reviewers are
* Send reminders to your reviewers (with a note indicating the reminder was manually triggered by the requester)
* Cancel your request
* Escalate approval of your request to your skip manager by clicking **Escalate to skip manager**

![](https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/d480d1884515336a40970e50d3aac58ee601975cd0b8cf1e6927d21f531f93d0-Screenshot_2025-05-16_at_8.42.54_AM.png?fit=max\&auto=format\&n=lwwIeFbsleftxaXx\&q=85\&s=2bc95f27c9a0f83525c2bf0d5432acf1)

## How can I escalate my request?

If your approver is your manager, you can escalate your request to your skip manager by selecting **Escalate to skip manager** on the request. Your skip manager will be notified to approve your request. This is especially useful if your manager is unavailable and your request is urgent.

![](https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/d2d840bc111a46eaa6e4c22357599b3b96928a93ad088c16adbf325fd6f68f6d-Screenshot_2025-05-16_at_8.50.00_AM.png?fit=max\&auto=format\&n=lwwIeFbsleftxaXx\&q=85\&s=d4acbb0f4f229ce88f6d4bab3ec9b358)

## How do I check the status of my access request?

You can view the status of your access requests in the **Sent** tab of the **Requests** page. Each request shows its current status (Pending, Approved, Denied, etc.) and any pending approval steps.

## How long does my access request take to process after it's approved?

Most approved access requests are propagated to end systems within two minutes.

## How can I approve access requests?

You will be notified via Slack and email if you are a reviewer. In Slack, approvers can approve or reject access requests. This automatically provisions access.

![](https://mintcdn.com/opalsecurity/CCjTTkaW-43B4efd/images/docs/f6a5283-Screen_Shot_2022-08-24_at_2.43.55_PM.png?fit=max\&auto=format\&n=CCjTTkaW-43B4efd\&q=85\&s=eee83f4b401724deeb2a1f44dab965d1)

Requestors and requestees can also leave comments in Slack. Replies in the thread via Slack will show as comments in Opal. These comments bi-directionally sync with Opal's web UI.

![](https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/c36d8a343d2006a03c8b0fc682c76003bbbe2697b51d4a2f3ee9e71052c5a735-pending-request-admin.png?fit=max\&auto=format\&n=lwwIeFbsleftxaXx\&q=85\&s=94e5cf9006b8bacb015f22dd4143b3f8)

## Can I approve my own access requests?

No. Currently access requests can not be approved by the submitter. Users are blocked from creating request conditions where they are the only possible approver, and submitters do not receive approval notifications for assets that they have requested where they are also a member of the approval owner.

## What happens if my access expires?

If you have been granted short-lived access to a resource and the time limit has expired, then Opal will automatically revoke your access.

![](https://mintcdn.com/opalsecurity/odnvD_MsXBxTor9u/images/docs/83fd592d4bf5f7ac79b5ef828f8ceff2edb18fa948d2c6d8ac781dc108949bdd-re-request-access.png?fit=max\&auto=format\&n=odnvD_MsXBxTor9u\&q=85\&s=6ed880557582910d0f797360a74cc6b7)

If your request is for more than 24 hours, Opal will send out notifications one day and one hour before to remind you to extend access. You will only receive a reminder notification if your access originated from a request. You will not get a notification if you were manually added to the resource or group by an admin.

![](https://mintcdn.com/opalsecurity/4Xj9diJ3E3kX-9Xd/images/docs/e37d31a-Screen_Shot_2022-09-19_at_10.48.28_AM.png?fit=max\&auto=format\&n=4Xj9diJ3E3kX-9Xd\&q=85\&s=7c0cad49ed37f0a01f3e4d44f39e9a45)

If your organization has enabled it, you may be able to extend your access from Slack or the Opal UI. Extended access does not need to be approved again.

![](https://mintcdn.com/opalsecurity/TlQj9FwRe9HHNEYB/images/docs/0ccf3a74073a5bf8a0a2a4abf6b194f6be53b03455aeebe8b182c2297742c1c3-favorites-req-extensions.png?fit=max\&auto=format\&n=TlQj9FwRe9HHNEYB\&q=85\&s=0d7178ab913bba98d124d1c12d01b625)

When your access expires after the requested duration, Opal sends you a Slack notification with a link to easily re-request.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.