# Requesting Oracle Cloud access

This guide describes how to request Just-in-Time access to Oracle Cloud Infrastructure (OCI) groups using P0.

## Request Methods

You can request OCI group access through:

* P0 CLI
* Slack (using `/p0 request`)
* Web modal at [p0.app](https://p0.app)

## Using the P0 CLI

### Command Syntax

```bash
p0 request oci group <domain-ocid> <tenancy-ocid> <group-ocid>
```

Parameters

| Parameter    | Description                            |
| ------------ | -------------------------------------- |
| domain-ocid  | The OCID of the OCI identity domain    |
| tenancy-ocid | The OCID of your OCI tenancy           |
| group-ocid   | The OCID of the group you want to join |

Example

p0 request oci group\
ocid1.domain.oc1..aaaaaaaaexample\
ocid1.tenancy.oc1..aaaaaaaaexample\
ocid1.group.oc1..aaaaaaaaexample

## Using Slack

1. Open Slack and type /p0 request to open the P0 request modal.
2. Select Oracle Cloud as the resource type.
3. Choose the identity domain.
4. Select the group you want to request access to.
5. Optionally, give a reason for the request.
6. Click Request to submit.

## Using the Web Modal

1. Navigate to <https://p0.app>.
2. Click Request Access or use the keyboard shortcut.
3. Select Oracle Cloud as the resource type.
4. Choose the identity domain from the dropdown.
5. Select the target group.
6. Add a reason (optional but recommended).
7. Submit the request.

## What Happens Next

After submitting your request:

1. Notification: You receive a confirmation that your request is submitted
2. Approval: The system routes the request to the appropriate approvers based on your organization's access policies
3. Provisioning: Once approved, P0 adds you to the requested OCI group
4. Access: You now have access to resources associated with that group
5. Expiration: Access automatically expires after the configured duration

Request States

| State    | Description                                     |
| -------- | ----------------------------------------------- |
| Pending  | Request submitted, awaiting approval            |
| Approved | Request approved; access is being provisioned   |
| Active   | Access has been granted and is now active       |
| Expired  | Access duration has elapsed, membership revoked |
| Denied   | Request was denied by an approver               |

Relinquishing Access

If you finish your work before the access expires, you can relinquish access early:

* In Slack: Click the Relinquish button in the P0 message
* In p0.app: Navigate to your active requests and click Relinquish

This immediately removes your group membership, following the principle of least privilege.

## See Also

* [Access Policies](/access-management/just-in-time-access/request-routing.md)


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.p0.dev/integrations/resource-integrations/oracle-cloud/requesting-access.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.