Requesting Access

Requesting access to Oracle Cloud Infrastructure (OCI) groups through P0.

This guide describes how to request Just-in-Time access to Oracle Cloud Infrastructure (OCI) groups using P0.

Request Methods

You can request OCI group access through:

• P0 CLI

• Slack (using /p0 request)

• Web modal at p0.app

Using the P0 CLI

Command Syntax

p0 request oci group <domain-ocid> <tenancy-ocid> <group-ocid>

Parameters

Parameter	Description
domain-ocid	The OCID of the OCI identity domain
tenancy-ocid	The OCID of your OCI tenancy
group-ocid	The OCID of the group you want to join

Example

p0 request oci group ocid1.domain.oc1..aaaaaaaaexample ocid1.tenancy.oc1..aaaaaaaaexample ocid1.group.oc1..aaaaaaaaexample

Using Slack

1. Open Slack and type /p0 request to open the P0 request modal.

2. Select Oracle Cloud as the resource type.

3. Choose the identity domain.

4. Select the group you want to request access to.

5. Optionally, give a reason for the request.

6. Click Request to submit.

Using the Web Modal

1. Navigate to https://p0.app.

2. Click Request Access or use the keyboard shortcut.

3. Select Oracle Cloud as the resource type.

4. Choose the identity domain from the dropdown.

5. Select the target group.

6. Add a reason (optional but recommended).

7. Submit the request.

What Happens Next

After submitting your request:

1. Notification: You receive a confirmation that your request is submitted

2. Approval: The system routes the request to the appropriate approvers based on your organization's routing rules

3. Provisioning: Once approved, P0 adds you to the requested OCI group

4. Access: You now have access to resources associated with that group

5. Expiration: Access automatically expires after the configured duration

Request States

State	Description
Pending	Request submitted, awaiting approval
Approved	Request approved; access is being provisioned
Active	Access has been granted and is now active
Expired	Access duration has elapsed, membership revoked
Denied	Request was denied by an approver

Relinquishing Access

If you finish your work before the access expires, you can relinquish access early:

• In Slack: Click the Relinquish button in the P0 message

• In p0.app: Navigate to your active requests and click Relinquish

This immediately removes your group membership, following the principle of least privilege.

See Also

• Request Routing