> For the complete documentation index, see [llms.txt](https://docs.p0.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.p0.dev/access-management/just-in-time-access/access-policies.md).

# Access policies

Access policies let you limit and direct just-in-time access requests, based on *who* is making the request and *which* resource they request. Instead of routing every request to your Security Reviewers, you decide who can request which resources, and who approves.

This section covers everything you need to configure and manage access policies:

* [**Configuring access policies**](/access-management/just-in-time-access/access-policies/configure-your-first-access-policy.md): the complete guide covering the Policy Studio walkthrough, the full policy format reference (requestors, resources, filters, and approvals), worked scenarios, and how P0 evaluates requests.
* [**AWS filtering**](/access-management/just-in-time-access/access-policies/aws-filtering.md), [**Google Cloud filtering**](/access-management/just-in-time-access/access-policies/google-cloud-filtering.md), [**Microsoft Azure filtering**](/access-management/just-in-time-access/access-policies/microsoft-azure-filtering.md), and [**SSH filtering**](/access-management/just-in-time-access/access-policies/ssh-filtering.md): narrow which resources within each integration can be requested.
* [**Agentic access policies**](/access-management/just-in-time-access/access-policies/agentic-access-policies.md): route or auto-approve requests made by AI agents through the [P0 AI Gateway](/readme/agentic-control-plane.md).

## Ways to manage access policies

To use access policies, go to p0.app and navigate to **Policy Studio**. Saving a policy configuration here configures your organization to use policy-based approvals, rather than default approvals.

<figure><img src="https://3783273641-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FSQNwGQz62W737pY0FzVb%2Fuploads%2Fgit-blob-35397c393ee4c3531cfb79cdf2f535a25255eb56%2Fimage.png?alt=media" alt="P0 Request Routing YAML editor for configuring approval workflow rules" width="563"><figcaption></figcaption></figure>

You can also manage access policies programmatically instead of in Policy Studio:

* [**Access Policies API**](/access-management/just-in-time-access/just-in-time-api/access-policies-api.md): create, read, update, and delete policies over HTTP. Use this to script incremental changes or to build policy management into your own tools.
* [**Terraform provider**](/p0-api/manage-p0-policies-and-settings-as-code.md): manage policies as version-controlled, reviewable configuration with the [`p0_access_policy`](https://registry.terraform.io/providers/p0-security/p0/latest/docs/resources/access_policy) resource, alongside your RBAC role assignments and JIT access settings.

All three methods manage the same single policy configuration, so a change made through one is reflected in the others.

## New to access policies?

Start with the [Configure your first access policy](/getting-started/configure-your-first-access-policy.md) tutorial for a hands-on walkthrough. For the full policy format, worked scenarios, and evaluation order, see [Configuring access policies](/access-management/just-in-time-access/access-policies/configure-your-first-access-policy.md).