> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/access-management/just-in-time-access.md).

# Just-in-time access

Just-in-time (JIT) access allows your organization's users to gain ephemeral access to individual production resources on demand, replacing standing access. Access is requested, approved, provisioned, and automatically revoked — all within minutes.

{% hint style="info" %}
**New to P0?**

* **Developers requesting access:** Start with the [request access quickstart](/getting-started/request-access-quickstart.md) to submit your first request in minutes.
* **Administrators setting up P0:** Start with the [Getting started with just-in-time access](/getting-started/getting-started-with-just-in-time-access.md) guide to configure integrations and approval workflows.
  {% endhint %}

## How it works

1. A user **requests** access to a specific resource (via Slack, the P0 web app, or the [P0 CLI](/p0-cli/p0-commands-and-usage/p0-request.md)).
2. P0 **routes** the request to the appropriate approver based on your organization's policies.
3. An approver **reviews and approves** (or denies) the request.
4. P0 **provisions** access automatically and notifies the requester.
5. Access **expires** after the approved duration, or the requester relinquishes it early.

## Request access

Learn how to create, track, and manage access requests:

* [Requesting access](/access-management/just-in-time-access/requesting-access.md) — Create access requests via Slack or the P0 web app, discuss with approvers, and manage active sessions.
* [Request on behalf of another user](/access-management/just-in-time-access/requesting-access/for-another-party.md) — Submit access requests for a colleague or service account.
* [Web request modal](/access-management/just-in-time-access/requesting-access/web-request-modal.md) — Use the P0 web app to request access directly from your browser.

You can also request access using the P0 CLI. See [`p0 request`](/p0-cli/p0-commands-and-usage/p0-request.md), [`p0 aws role assume`](/p0-cli/p0-commands-and-usage/p0-aws-role-assume.md), and [`p0 ssh`](/p0-cli/p0-commands-and-usage/p0-ssh.md) for command-line workflows.

## Approve access

Configure approval policies and review incoming requests:

* [Approving access](/access-management/just-in-time-access/approving-access.md) — Configure approvers, review requests, and manage approval workflows.
* [Pre-approving access](/access-management/just-in-time-access/approving-access/pre-approving-access.md) — Set up standing approvals so that specific users or groups receive access automatically.
* [P0 Allow modal, CLI, and UI](/access-management/just-in-time-access/approving-access/p0-allow-workflows.md) — Grant pre-approved access through the web app or CLI.

## Configure access policies

Control who can request what, and who approves:

* [Access policies](/access-management/just-in-time-access/request-routing.md) — Define policies that route requests to specific approvers based on the requester, resource, and access type.
  * [Google Cloud filtering](/access-management/just-in-time-access/request-routing/google-cloud-filtering.md)
  * [AWS filtering](/access-management/just-in-time-access/request-routing/aws-filtering.md)
  * [Microsoft Azure filtering](/access-management/just-in-time-access/request-routing/microsoft-azure-filtering.md)
  * [SSH filtering](/access-management/just-in-time-access/request-routing/ssh-filtering.md)

## Monitor and audit

* [Session recording](/access-management/just-in-time-access/session-recording.md) — View detailed activity logs for privileged sessions to answer questions about what happened during access.

## Automate with the API

* [Just-in-time API](/access-management/just-in-time-access/just-in-time-api.md) — Programmatically manage access workflows, including the [Command API](/access-management/just-in-time-access/just-in-time-api/command-api.md), [Access Requests API](/access-management/just-in-time-access/just-in-time-api/access-requests-api.md), and [Access Policies API](/access-management/just-in-time-access/just-in-time-api/routing-rules-api.md).