Requesting Access

This guide explains how to request just-in-time access to private network resources protected by Cisco Secure Access through P0.

Overview

When your organization uses P0 with Cisco Secure Access, you can request temporary access to private resources (servers, databases, applications) without needing permanent access credentials. Access is granted for a limited time and automatically expires.

Prerequisites

Before requesting access, ensure you have:

• P0 Access: Your P0 account is set up and you're added to relevant access groups.

• Cisco Secure Access Client: The client application is installed on your workstation.

• SSO Credentials: Your identity provider credentials (e.g., Okta, Azure AD).

• Network Access: Your device meets any required network security policies.

First-time users: Install the Cisco Secure Access client before requesting access. You'll need it to connect to private resources.

Requesting Access via P0 cli

1. Run the following command to get the list of available resources:

p0 ls ssh session destination

1. Using the p0 client, ssh into the required resource.

p0 ssh <resource>

If there is an auto approval process set-up, you will get instant access to the resource. If approval is required, you will get access after it has been granted to you by the approver.

Additional Resources

• Cisco Secure Access Documentation

• Cisco Secure Access API Reference

• Requesting Access via Slack