> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/access-management/access-management.md).

# Access Management

See your active grants, pending requests, pre-approvals, and request history on the Access Management screen.

Access Management is the screen where your organization's users submit, track, and audit access requests: just-in-time access to cloud resources, and, where your organization has enabled the [P0 Runtime Access for AI](/readme/agentic-control-plane.md), AI agent access as well.

Every signed-in user can see Access Management, regardless of role. Unlike Policy Studio, Settings, and Agentic Access, there's no role requirement to view this screen.

## Access Management in the app

Access Management has three tabs: Activity, Pre Approvals, and History.

### Activity

The Activity tab shows your active access grants and any requests still waiting for approval. An active grant has a Relinquish action if it belongs to you and a Revoke action if it belongs to someone else. A pending request has Approve and Deny actions for its approver. See [Requesting access](/access-management/access-management/just-in-time-access/requesting-access.md) and [Approving access](/access-management/access-management/just-in-time-access/approving-access.md) for the full workflows.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-64ef7eb2249c802e36de7a68dc11131f09f91e82%2Faccess-management-activity.png?alt=media" alt="Access Management screen on the Activity tab, showing Active and Pending sections with no requests"><figcaption></figcaption></figure>

### Pre Approvals

The Pre Approvals tab lists standing approvals that skip the request and approval step for specific users or groups. There's no create or edit option on this tab. Pre-approvals are created using the `/p0 allow` Slack command or the P0 CLI. See [Pre-approving access](/access-management/access-management/just-in-time-access/approving-access/pre-approving-access.md).

{% hint style="info" %}
**Don't see Pre Approvals?**

Pre Approvals is an opt-in capability for your whole organization, not a per-user role. Changing your role won't make the tab appear. Contact P0 to enable it for your organization.
{% endhint %}

### History

The History tab lists past requests: who requested what, who approved it, and when access expired. Click a row for more detail, or click **Export** to download the request history as a TSV file.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-a1709eadf4eade75121273e781cfb0d42965ab0e%2Faccess-management-history.png?alt=media" alt="Access Management screen on the History tab, showing the request table with Status, Requested, Requestor, Resource, Approver, and Reason columns, and an Export requests button"><figcaption></figcaption></figure>

A **Request Access** button appears at the top of the screen on every tab. Click it to submit a new request without leaving Access Management. See [Requesting access](/access-management/access-management/just-in-time-access/requesting-access.md).

## Configure requests and approvals

Access Management shows requests. It doesn't configure how they get routed or approved. For the full setup, request, and approval workflow, see [Just-in-time access](/access-management/access-management/just-in-time-access.md). For how P0 decides who approves a request, or whether to approve it automatically, see [Policy Studio](/policy-studio/policy-studio.md).

## Manage requests programmatically

You can also submit and manage access requests without using Access Management. See the [Just-in-time API](/access-management/access-management/just-in-time-access/just-in-time-api.md), including the [Command API](/access-management/access-management/just-in-time-access/just-in-time-api/command-api.md) and [Access requests API](/access-management/access-management/just-in-time-access/just-in-time-api/access-requests-api.md).

## New to Access Management?

* **Developers requesting access:** Start with [Request access to a resource](/getting-started/request-access-quickstart.md) to submit your first request in minutes.
* **Administrators setting up P0:** Start with [Grant just-in-time access to your cloud](/getting-started/getting-started-with-just-in-time-access.md) to configure integrations and approval workflows.
