> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/access-management/just-in-time-access.md).

# Just-in-time access

Just-in-time (JIT) access allows your organization's users to gain ephemeral access to individual production resources on demand, replacing standing access. Access is requested, approved, provisioned, and automatically revoked, all within minutes.

{% hint style="info" %}
**New to P0?**

* **Developers requesting access:** Start with the [request access quickstart](/getting-started/request-access-quickstart.md) to submit your first request in minutes.
* **Administrators setting up P0:** Start with the [Getting started with just-in-time access](/getting-started/getting-started-with-just-in-time-access.md) guide to configure integrations and approval workflows.
  {% endhint %}

## How it works

1. A user **requests** access to a specific resource (via Slack, the P0 web app, or the [P0 CLI](/p0-cli/p0-commands-and-usage/p0-request.md)).
2. P0 **routes** the request to the appropriate approver based on your organization's policies.
3. An approver **reviews and approves** (or denies) the request.
4. P0 **provisions** access automatically and notifies the requestor.
5. Access **expires** after the approved duration, or the requestor relinquishes it early.

## Request access

Learn how to create, track, and manage access requests:

* [Requesting access](/access-management/just-in-time-access/requesting-access.md): Create access requests via Slack or the P0 web app, discuss with approvers, and manage active sessions.
* [Request on behalf of another user](/access-management/just-in-time-access/requesting-access/for-another-party.md): Submit access requests for a colleague or service account.
* [Web request modal](/access-management/just-in-time-access/requesting-access/web-request-modal.md): Use the P0 web app to request access directly from your browser.

You can also request access using the P0 CLI. See [`p0 request`](/p0-cli/p0-commands-and-usage/p0-request.md), [`p0 aws role assume`](/p0-cli/p0-commands-and-usage/p0-aws-role-assume.md), and [`p0 ssh`](/p0-cli/p0-commands-and-usage/p0-ssh.md) for command-line workflows.

## Approve access

Configure approval policies and review incoming requests:

* [Approving access](/access-management/just-in-time-access/approving-access.md): Configure approvers, review requests, and manage approval workflows.
* [Pre-approving access](/access-management/just-in-time-access/approving-access/pre-approving-access.md): Set up standing approvals so that specific users or groups receive access automatically.
* [P0 Allow modal, CLI, and UI](/access-management/just-in-time-access/approving-access/p0-allow-workflows.md): Grant pre-approved access through the web app or CLI.

## Configure access policies

Control who can request what, and who approves:

* [Access policies](/access-management/just-in-time-access/access-policies.md): Define policies that route requests to specific approvers based on the requestor, resource, and access type.
  * [Google Cloud filtering](/access-management/just-in-time-access/access-policies/google-cloud-filtering.md)
  * [AWS filtering](/access-management/just-in-time-access/access-policies/aws-filtering.md)
  * [Microsoft Azure filtering](/access-management/just-in-time-access/access-policies/microsoft-azure-filtering.md)
  * [SSH filtering](/access-management/just-in-time-access/access-policies/ssh-filtering.md)

## Monitor and audit

* [Session recording](/access-management/just-in-time-access/session-recording.md): View detailed activity logs for privileged sessions to answer questions about what happened during access.

## Automate with the API

* [Just-in-time API](/access-management/just-in-time-access/just-in-time-api.md): Programmatically manage access workflows, including the [Command API](/access-management/just-in-time-access/just-in-time-api/command-api.md), [Access Requests API](/access-management/just-in-time-access/just-in-time-api/access-requests-api.md), and [Access Policies API](/access-management/just-in-time-access/just-in-time-api/access-policies-api.md).