P0 App Documentation
Sign up for FreeSandbox
  • What Is P0?
    • πŸŽ›οΈIAM Dashboard
    • πŸ”ŽAccess Inventory
    • πŸͺ‘IAM Posture
    • ⏱️Just-In-Time Access
    • ♻️Service-Account Key Rotation
  • Getting Started
    • ⬇️Quick Start
    • 🎁Share P0 With Your Team
  • INVENTORY
    • πŸ—ΊοΈAccess Inventory
    • πŸ”¬Result Details
    • ❔Query Search
      • πŸ“–Search Reference
  • Posture
    • βš–οΈPosture Overview
  • Monitor Results
  • πŸ€”Finding Details
  • ORCHESTRATION
    • ⏰Just-in-time access
      • πŸ–οΈRequesting Access
        • πŸ‘‰For Another Party
      • 🏁Approving Access
        • Pre-approving Access
      • πŸ”€Request Routing
        • Google Cloud Filtering
        • AWS Filtering
  • Environments
    • ☁️Creating an Environment
    • πŸ““Environment Terminology
    • βš™οΈSettings
  • Integrations
    • πŸ“žNotifier integrations
      • πŸ’¬Slack
      • πŸ‘¬Microsoft Teams
      • πŸ“£Custom Notifier
    • πŸ”‘Resource integrations
      • ☁️Google Cloud
        • Requesting Access
        • Permissions Reference
          • Cloud Storage
          • Compute Engine
      • πŸ“¦AWS
        • Requesting Access
      • ☸️Kubernetes
        • Requesting Access
        • Advanced Requests
      • πŸ”‹PostgreSQL
        • Requesting Access
      • ❄️Snowflake
      • πŸ–₯️SSH
      • GitHub
        • Requesting Access
      • πŸ› οΈCustom Resource
    • πŸ‘₯Directory integrations
      • Microsoft Entra ID
        • Requesting Access
      • Google Workspace
      • Integrate P0 with Okta
    • βœ”οΈApproval integrations
      • πŸ””PagerDuty
    • πŸ”ŒSIEM Integrations
      • Splunk HEC Setup
  • P0 Management
    • 🎩Role-Based Access Control
Powered by GitBook
On this page
  1. Integrations
  2. Resource integrations
  3. GitHub

Requesting Access

How to request access to a GitHub team via P0

PreviousGitHubNextCustom Resource

Last updated 3 months ago

Requesting from Slack

Open up the p0 request modal by typing the command /p0 request in any Slack channel and select GitHub as the resource.

Under Team, start typing the name of the team you would like to be added to. As you type, suggestions will appear in a dropdown. Select the team that you need access to in the dropdown.

Optionally, enter a reason for the request under Reason access is needed, and/or specify a requested duration of access under Requested access duration. Finally, click the Request button.

Once you submit the request, you will get a Slack message from the P0 bot confirming your request creation. The P0 bot will also send a message to the approvers in the Slack channel designated by your org admin.

  1. If your request is approved, you will receive a message from the P0 bot saying that your access has been granted and letting you know when it will expire. You will be automatically added to the GitHub team you requested.

  2. If you are on-call (on a PagerDuty schedule), and your org admin has enabled PagerDuty routing, your access may be automatically approved for 1 hour.

  3. After your request is approved, you'll see a "relinquish" button on the Slack message from the p0 bot. You can optionally use this button to let go of your access early if you finish what you want to do before the expiration time. This will revoke the access, and you must make another request if you need it again.

  4. If you wait for the access to expire, you will get a message that it has expired once it does.

  5. If your request is denied, you'll receive a message.

GitHub teams can be granted various roles for the organization that contains them as well as the various repositories owned by the organization. This makes them roughly analogous to groups in other IAM systems. You are encouraged to create least-privilege teams for use with P0. For more information, please see GitHub's documentation, .

Note that the GitHub integration does not presently support . All users are added to teams with the "member" role, which does not grant any ability to modify the team itself.

πŸ”‘
Roles in an organization
team membership roles