Requesting Oracle Cloud access
Requesting access to Oracle Cloud Infrastructure (OCI) groups through P0.
Last updated
Requesting access to Oracle Cloud Infrastructure (OCI) groups through P0.
This guide describes how to request Just-in-Time access to Oracle Cloud Infrastructure (OCI) groups using P0.
You can request OCI group access through:
P0 CLI
Slack (using /p0 request)
Web modal at p0.app
p0 request oci group <domain-ocid> <tenancy-ocid> <group-ocid>Parameters
domain-ocid
The OCID of the OCI identity domain
tenancy-ocid
The OCID of your OCI tenancy
group-ocid
The OCID of the group you want to join
Example
p0 request oci group ocid1.domain.oc1..aaaaaaaaexample ocid1.tenancy.oc1..aaaaaaaaexample ocid1.group.oc1..aaaaaaaaexample
Open Slack and type /p0 request to open the P0 request modal.
Select Oracle Cloud as the resource type.
Choose the identity domain.
Select the group you want to request access to.
Optionally, give a reason for the request.
Click Request to submit.
Navigate to https://p0.app.
Click Request Access or use the keyboard shortcut.
Select Oracle Cloud as the resource type.
Choose the identity domain from the dropdown.
Select the target group.
Add a reason (optional but recommended).
Submit the request.
After submitting your request:
Notification: You receive a confirmation that your request is submitted
Approval: The system routes the request to the appropriate approvers based on your organization's access policies
Provisioning: Once approved, P0 adds you to the requested OCI group
Access: You now have access to resources associated with that group
Expiration: Access automatically expires after the configured duration
Request States
Pending
Request submitted, awaiting approval
Approved
Request approved; access is being provisioned
Active
Access has been granted and is now active
Expired
Access duration has elapsed, membership revoked
Denied
Request was denied by an approver
Relinquishing Access
If you finish your work before the access expires, you can relinquish access early:
In Slack: Click the Relinquish button in the P0 message
In p0.app: Navigate to your active requests and click Relinquish
This immediately removes your group membership, following the principle of least privilege.
Last updated