# P0 App Documentation ## P0 App Documentation - [What Is P0?](https://docs.p0.dev/readme.md): P0 Security is a cloud-native Privileged Access Management platform. Enforce just-in-time access and least-privilege governance across multi-cloud environments. - [P0 Dashboard](https://docs.p0.dev/readme/p0-dashboard.md): Track access security with automated reporting. View identities, posture findings, JIT access metrics, and request trends from the P0 dashboard. - [Access Inventory](https://docs.p0.dev/readme/access-inventory.md): Discover production assets, identities, and access risks across AWS, Google Cloud, Kubernetes, Okta, and Google Workspace with P0's access inventory. - [Posture](https://docs.p0.dev/readme/posture.md): Automatically scan your cloud environment for access risks. P0 Security detects overprivileged accounts, stale credentials, and security vulnerabilities. - [Just-In-Time Access](https://docs.p0.dev/readme/just-in-time-access.md): Grant tailored, short-lived privileges to specific cloud resources on demand. Reduce standing access and enforce least privilege with P0 Security's JIT access. - [Service-Account Key Rotation](https://docs.p0.dev/readme/service-account-key-rotation.md): Manage rotation of static service account credentials for third-party systems. P0 discovers owners, creates fresh credentials, and coordinates updates. - [P0 Onboarding](https://docs.p0.dev/getting-started/p0-security-onboarding.md): Deploy P0 Security, integrate your cloud environments, and establish just-in-time access for human and non-human identities. For security and DevOps teams. - [Supported Identity Providers](https://docs.p0.dev/getting-started/p0-security-onboarding/supported-identity-providers.md) - [Okta Sign-In Setup](https://docs.p0.dev/getting-started/p0-security-onboarding/supported-identity-providers/okta-sign-in-setup.md) - [Request Access Quickstart](https://docs.p0.dev/getting-started/request-access-quickstart.md): Request your first just-in-time access to a cloud resource through Slack, Microsoft Teams, the P0 web app, or the CLI. A quickstart for developers and engineers. - [Getting Started with Just-in-Time Access](https://docs.p0.dev/getting-started/getting-started-with-just-in-time-access.md): Install P0 Security, configure approval workflows, and make your first just-in-time access request. A step-by-step guide for security and DevOps teams. - [Configure Your First Access Policy](https://docs.p0.dev/getting-started/configure-your-first-access-policy.md): Create an access policy in P0 Security's Policy Studio to control who can request access, what they can access, and who approves. A step-by-step tutorial for security administrators. - [Getting Started with Posture](https://docs.p0.dev/getting-started/getting-started-with-posture.md): Connect your cloud environment, run your first posture scan, and triage access risk findings with P0 Security's posture management product. - [Getting Started with Access Inventory](https://docs.p0.dev/getting-started/getting-started-with-access-inventory.md): Connect your cloud environment, navigate the Access Inventory page, run your first query, investigate access risks, and save a monitor with P0 Security. - [Getting Started with the P0 CLI](https://docs.p0.dev/getting-started/getting-started-with-the-p0-cli.md): Install the P0 CLI, authenticate, send your first permission request, and open your first SSH session with just-in-time access — all from the command line. - [Share P0 With Your Team](https://docs.p0.dev/getting-started/share-p0-with-your-team.md): Use the P0 slackbot to help your users learn how to create access requests through P0. - [Configure Access Policies](https://docs.p0.dev/getting-started/configuring-access-policies.md): Set up access policies in Policy Studio to control who can request access, what they can request, and who approves it. A step-by-step guide for security administrators. - [Access Inventory](https://docs.p0.dev/inventory/access-inventory.md): Browse and query your entire IAM configuration. Combine data from identity providers, IAM policies, access logs, and P0's IAM Privilege Catalog. - [Result Details](https://docs.p0.dev/inventory/result-details.md) - [Query Search](https://docs.p0.dev/inventory/query-search.md) - [Query Language Basics](https://docs.p0.dev/inventory/query-search/query-language-basics.md): A beginner's guide to querying P0's Access Inventory. Learn the core search terms (identity, credential, entitlement, risk), the colon, arrow, and reverse-arrow operators, the type argument, and how t - [Search Reference](https://docs.p0.dev/inventory/query-search/search-reference.md) - [Posture Overview](https://docs.p0.dev/posture/posture-overview.md): Detect access vulnerabilities with automated monitors. View scan results, define custom policies, and enforce organization-specific access controls with P0. - [Monitor Results](https://docs.p0.dev/posture/monitor-results.md) - [Finding Details](https://docs.p0.dev/posture/finding-details.md) - [Just-in-time access](https://docs.p0.dev/access-management/just-in-time-access.md): Set up ephemeral, on-demand access to production resources. Requests are approved, provisioned, and automatically revoked within minutes using P0 Security. - [Requesting Access](https://docs.p0.dev/access-management/just-in-time-access/requesting-access.md): Request just-in-time access to cloud resources using P0. - [For Another Party](https://docs.p0.dev/access-management/just-in-time-access/requesting-access/for-another-party.md) - [Web Request Modal](https://docs.p0.dev/access-management/just-in-time-access/requesting-access/web-request-modal.md) - [Approving Access](https://docs.p0.dev/access-management/just-in-time-access/approving-access.md): This page describes how to review and approve just-in-time access requests - [Auto-approve access for on-call engineers](https://docs.p0.dev/access-management/just-in-time-access/approving-access/auto-approve-on-call-access.md): Configure P0 to automatically grant just-in-time access to engineers who are on-call, using your PagerDuty or Incident.io schedule. Give responders fast, time-boxed access during incidents without man - [Pre-approving Access](https://docs.p0.dev/access-management/just-in-time-access/approving-access/pre-approving-access.md) - [P0 allow modal, CLI, and UI](https://docs.p0.dev/access-management/just-in-time-access/approving-access/p0-allow-workflows.md): Configure P0 allow pre-approvals from Slack, the CLI, or the P0 web app. - [Access Policies](https://docs.p0.dev/access-management/just-in-time-access/request-routing.md) - [Configure your first access policy](https://docs.p0.dev/access-management/just-in-time-access/request-routing/configure-your-first-access-policy.md): Create and manage access policies in P0 Security's Policy Studio to control who can request access to which resources and how requests are approved. - [Google Cloud Filtering](https://docs.p0.dev/access-management/just-in-time-access/request-routing/google-cloud-filtering.md) - [AWS Filtering](https://docs.p0.dev/access-management/just-in-time-access/request-routing/aws-filtering.md) - [Microsoft Azure Filtering](https://docs.p0.dev/access-management/just-in-time-access/request-routing/microsoft-azure-filtering.md): This document covers the various ways fine-grained just-in-time access for Microsoft Azure can be configured by using P0's access policies. - [SSH Filtering](https://docs.p0.dev/access-management/just-in-time-access/request-routing/ssh-filtering.md) - [Session Recording](https://docs.p0.dev/access-management/just-in-time-access/session-recording.md): Session Recording in P0 allows you to view detailed activity that occurs within a privileged session. - [AWS](https://docs.p0.dev/access-management/just-in-time-access/session-recording/aws.md): View CloudTrail activity taken within a privileged session. - [Just-in-time API](https://docs.p0.dev/access-management/just-in-time-access/just-in-time-api.md) - [Command API](https://docs.p0.dev/access-management/just-in-time-access/just-in-time-api/command-api.md): Enable external systems to programmatically initiate access requests—enabling automation and integration with internal tools, bots, and security workflows. - [Access requests API](https://docs.p0.dev/access-management/just-in-time-access/just-in-time-api/access-requests-api.md): Enable programmatic approval, denial, and revocation of access—enabling seamless integration with internal tools, bots, and security workflows for automated access escalation. - [Access policies API](https://docs.p0.dev/access-management/just-in-time-access/just-in-time-api/routing-rules-api.md): Enable fine-grained control over how just-in-time access requests are evaluated, approved, and enforced—ensuring secure, compliant, and context-aware access policies. - [Creating an Environment](https://docs.p0.dev/environments/creating-an-environment.md) - [Install IAM assessment on Google Cloud](https://docs.p0.dev/environments/creating-an-environment/install-iam-assessment-google-cloud.md): Install the P0 IAM assessment integration on Google Cloud to collect IAM data. Required to use Access Inventory and Posture for your GCP projects. - [Install IAM assessment on AWS](https://docs.p0.dev/environments/creating-an-environment/install-iam-assessment-aws.md): Install the P0 IAM assessment integration on AWS to collect IAM data. Required to use Access Inventory and Posture for your AWS accounts. - [Install IAM assessment on Microsoft Azure](https://docs.p0.dev/environments/creating-an-environment/install-iam-assessment-azure.md): Install the P0 IAM assessment integration on Microsoft Azure to collect IAM data. Required to use Access Inventory and Posture for your Azure subscriptions. - [Environment Terminology](https://docs.p0.dev/environments/environment-terminology.md) - [Settings](https://docs.p0.dev/environments/settings.md) - [Integrations](https://docs.p0.dev/integrations/integrations.md): Connect P0 with AWS, Google Cloud, Azure, Kubernetes, Okta, Slack, and other systems. Configure cloud, directory, notifier, and SIEM integrations. - [Notifier integrations](https://docs.p0.dev/integrations/notifier-integrations.md) - [Slack](https://docs.p0.dev/integrations/notifier-integrations/slack.md) - [Microsoft Teams](https://docs.p0.dev/integrations/notifier-integrations/microsoft-teams.md) - [Email](https://docs.p0.dev/integrations/notifier-integrations/email.md) - [Custom Notifiers](https://docs.p0.dev/integrations/notifier-integrations/custom-notifiers.md): Integrate P0 with any internal notification system you own, or with systems that do not have a built-in notification service yet. - [AWS Lambda Notifier](https://docs.p0.dev/integrations/notifier-integrations/custom-notifiers/aws-lambda-notifier.md) - [Resource integrations](https://docs.p0.dev/integrations/resource-integrations.md): Configure just-in-time access for AWS, Google Cloud, Azure, Kubernetes, SSH, and more. Install P0 Security resource integrations to manage privileged cloud access. - [Google Cloud](https://docs.p0.dev/integrations/resource-integrations/google-cloud.md): Set up P0's integration for Google Cloud Platform. Configure IAM management, just-in-time access, and privilege governance for your GCP environment. - [Security perimeter](https://docs.p0.dev/integrations/resource-integrations/google-cloud/security-perimeter.md): This page describes how to set up a Cloud Run security perimeter for P0 to manage access in your Google Cloud environment. - [Requesting Google Cloud access](https://docs.p0.dev/integrations/resource-integrations/google-cloud/requesting-access.md): How to request access to Google Cloud permissions, roles, and resources through the P0 bot - [Permissions reference](https://docs.p0.dev/integrations/resource-integrations/google-cloud/permissions-reference.md) - [Cloud Storage](https://docs.p0.dev/integrations/resource-integrations/google-cloud/permissions-reference/cloud-storage.md) - [Compute Engine](https://docs.p0.dev/integrations/resource-integrations/google-cloud/permissions-reference/compute-engine.md) - [Cloud Run invocation](https://docs.p0.dev/integrations/resource-integrations/google-cloud/cloud-run-invocation.md) - [AWS](https://docs.p0.dev/integrations/resource-integrations/aws.md): Install P0 IAM management on AWS in about 10 minutes. Configure just-in-time access, identity governance, and privilege management for your AWS environment. - [Requesting AWS access](https://docs.p0.dev/integrations/resource-integrations/aws/requesting-access.md): How to request just-in-time access to AWS IAM policies, groups, and roles through P0 via Slack, Teams, Webex, the P0 CLI, or the P0 dashboard. - [Permission levels](https://docs.p0.dev/integrations/resource-integrations/aws/requesting-access/permission-levels.md): Permission levels available when requesting just-in-time access to AWS resources through P0, including P0 curated policies and scoped AWS-managed policies. - [AWS Integration API](https://docs.p0.dev/integrations/resource-integrations/aws/aws-integration-api.md): Manage installable components of the P0 Amazon Web Services integration. - [Function invocation](https://docs.p0.dev/integrations/resource-integrations/aws/function-invocation.md) - [Managed services](https://docs.p0.dev/integrations/resource-integrations/aws/managed-services.md) - [AWS RDS](https://docs.p0.dev/integrations/resource-integrations/aws/managed-services/aws-rds.md) - [Microsoft Azure](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure.md): Install P0 IAM management on Microsoft Azure in about 10 minutes. Configure just-in-time access and privilege governance for your Azure environment. - [Azure App Registration](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure/azure-app-registration.md): Create the Azure app registration that establishes P0's service identity in your tenant. - [IAM Management](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure/iam-management.md): Enable Just‑in‑Time access to Azure resources by installing IAM management. - [Configure bastion host integration](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure/configure-bastion-host-integration.md): Set up the Azure Bastion host to enable secure SSH tunneling to your VMs. - [Install SSH access](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure/install-ssh-access.md): Connect P0 to your Azure VMs by installing SSH access. - [Requesting Microsoft Azure access](https://docs.p0.dev/integrations/resource-integrations/microsoft-azure/requesting-access.md): How to request just-in-time access to Microsoft Azure subscriptions, resources, and roles through P0 via Slack, Teams, Webex, the P0 CLI, or the P0 dashboard. - [Kubernetes](https://docs.p0.dev/integrations/resource-integrations/kubernetes.md): Add and configure P0's Kubernetes integration. Grant just-in-time, least-privilege access to Kubernetes clusters across AWS, Azure, and Google Cloud. - [Terraform installation](https://docs.p0.dev/integrations/resource-integrations/kubernetes/terraform-installation.md): How to install the P0 Kubernetes (EKS) integration using Terraform - [Requesting Kubernetes access](https://docs.p0.dev/integrations/resource-integrations/kubernetes/requesting-access.md): How to request access to Kubernetes permissions, roles, and resources through the P0 bot - [Advanced requests](https://docs.p0.dev/integrations/resource-integrations/kubernetes/advanced-requests.md): How to request common Kubernetes access patterns with P0 - [PostgreSQL](https://docs.p0.dev/integrations/resource-integrations/postgresql-new.md) - [Installing an RDS Database](https://docs.p0.dev/integrations/resource-integrations/postgresql-new/installing-an-rds-database.md) - [Requesting PostgreSQL Access](https://docs.p0.dev/integrations/resource-integrations/postgresql-new/requesting-postgresql-access.md) - [Cisco Secure Access](https://docs.p0.dev/integrations/resource-integrations/cisco-secure-access.md): Installing P0 access management for Cisco Secure Access takes about 15 minutes. - [Installation](https://docs.p0.dev/integrations/resource-integrations/cisco-secure-access/installation.md) - [Requesting Cisco Secure Access](https://docs.p0.dev/integrations/resource-integrations/cisco-secure-access/requesting-access.md): How to request just-in-time access to private network resources protected by Cisco Secure Access through P0 via Slack, Teams, Webex, the P0 CLI, or the P0 dashboard. - [Snowflake](https://docs.p0.dev/integrations/resource-integrations/snowflake.md) - [Tailscale](https://docs.p0.dev/integrations/resource-integrations/tailscale.md): Installing P0 access management for your Tailscale network takes about 5 minutes. - [Requesting Tailscale access](https://docs.p0.dev/integrations/resource-integrations/tailscale/requesting-access.md): How to request just-in-time access to Tailscale devices and network resources through P0 via Slack, Teams, Webex, the P0 CLI, or the P0 dashboard. - [SSH](https://docs.p0.dev/integrations/resource-integrations/ssh.md): How to request SSH permissions for AWS, Microsoft Azure and GCP instances. - [Self-hosted](https://docs.p0.dev/integrations/resource-integrations/ssh/self-hosted.md) - [Oracle Cloud](https://docs.p0.dev/integrations/resource-integrations/oracle-cloud.md): Installing P0 IAM management on Oracle Cloud Infrastructure (OCI). - [Requesting Oracle Cloud access](https://docs.p0.dev/integrations/resource-integrations/oracle-cloud/requesting-access.md): Requesting access to Oracle Cloud Infrastructure (OCI) groups through P0. - [GitHub](https://docs.p0.dev/integrations/resource-integrations/github.md): Managed just-in-time access for GitHub organization teams - [Requesting GitHub access](https://docs.p0.dev/integrations/resource-integrations/github/requesting-access.md): How to request access to a GitHub team via P0 - [Custom Resource](https://docs.p0.dev/integrations/resource-integrations/custom-resource.md): Integrate P0 with any internal system you own, or with systems that do not have a built-in integration yet. - [Installing a custom resource integration](https://docs.p0.dev/integrations/resource-integrations/custom-resource/installing-a-custom-resource-integration.md) - [MySQL](https://docs.p0.dev/integrations/resource-integrations/mysql.md) - [Installation](https://docs.p0.dev/integrations/resource-integrations/mysql/installation.md) - [Requesting MySQL access](https://docs.p0.dev/integrations/resource-integrations/mysql/requesting-access.md): How to request just-in-time access to MySQL databases through P0 using the CLI. - [Directory integrations](https://docs.p0.dev/integrations/directory-integrations.md): Connect P0 Security with Okta, Google Workspace, and Microsoft Entra ID. Configure directory integrations for group-based access policies and user provisioning. - [Microsoft Entra ID](https://docs.p0.dev/integrations/directory-integrations/microsoft-entra-id.md) - [Requesting Microsoft Entra ID access](https://docs.p0.dev/integrations/directory-integrations/microsoft-entra-id/requesting-access.md): Requesting access to Microsoft Entra ID Roles/Groups - [Microsoft Entra ID (Legacy)](https://docs.p0.dev/integrations/directory-integrations/microsoft-entra-id-legacy.md) - [Requesting Microsoft Entra ID access (legacy)](https://docs.p0.dev/integrations/directory-integrations/microsoft-entra-id-legacy/requesting-access.md): Requesting access to Microsoft Entra ID groups - [Google Workspace](https://docs.p0.dev/integrations/directory-integrations/google-workspace.md) - [Okta](https://docs.p0.dev/integrations/directory-integrations/okta.md) - [Approval integrations](https://docs.p0.dev/integrations/approval-integrations.md) - [PagerDuty](https://docs.p0.dev/integrations/approval-integrations/pagerduty.md) - [Incident.io](https://docs.p0.dev/integrations/approval-integrations/incidentio.md) - [SIEM Integrations](https://docs.p0.dev/integrations/siem-integrations.md): SIEM integrations allow you to stream P0 audit logs to target SIEM tools (Datadog, Splunk). - [Audit log format](https://docs.p0.dev/integrations/siem-integrations/audit-log-format.md): Reference for P0 audit log fields, actions, and payload formats streamed to SIEM integrations. - [Datadog setup](https://docs.p0.dev/integrations/siem-integrations/datadog-setup.md): Integration to send P0 audit logs to Datadog. - [Splunk HEC setup](https://docs.p0.dev/integrations/siem-integrations/splunk-hec-setup.md): Integration to send P0 audit logs to Splunk instance. - [Tracker integrations](https://docs.p0.dev/integrations/tracker-integrations.md) - [Jira](https://docs.p0.dev/integrations/tracker-integrations/jira.md) - [Role-Based Access Control](https://docs.p0.dev/p0-management/role-based-access-control.md): Configure role-based access control to enforce least-privileged access for your P0 Security users. Assign roles and manage permissions across your organization. - [Generating an API key](https://docs.p0.dev/p0-management/generating-an-api-key.md): Generate an API key to use the P0 Management API or install P0 via Terraform. - [Management API](https://docs.p0.dev/p0-management/management-api.md) - [Role management API](https://docs.p0.dev/p0-management/management-api/role-management-api.md) - [Just-in-time settings API](https://docs.p0.dev/p0-management/management-api/just-in-time-settings-api.md) - [Installing p0 CLI](https://docs.p0.dev/p0-cli/installing-p0-cli.md): Download and install the P0 CLI on macOS or Windows. Authenticate with your P0 account and start requesting cloud access from the command line. - [Windows](https://docs.p0.dev/p0-cli/installing-p0-cli/windows.md) - [macOS](https://docs.p0.dev/p0-cli/installing-p0-cli/macos.md) - [p0 Commands and Usage](https://docs.p0.dev/p0-cli/p0-commands-and-usage.md): Complete reference for P0 CLI commands including login, SSH, access requests, AWS role assumption, and Kubernetes configuration. - [p0 login](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-login.md) - [p0 logout](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-logout.md) - [p0 ssh](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-ssh.md) - [p0 request](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-request.md) - [p0 aws role assume](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-aws-role-assume.md) - [p0 aws permission-set assume](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-aws-permission-set-assume.md) - [p0 ls](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-ls.md) - [p0 allow](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-allow.md) - [p0 grant](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-grant.md) - [p0 kubeconfig](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-kubeconfig.md) - [p0 scp](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-scp.md) - [p0 rdp](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-rdp.md) - [p0 ssh-resolve](https://docs.p0.dev/p0-cli/p0-commands-and-usage/p0-ssh-resolve.md) - [Troubleshooting](https://docs.p0.dev/p0-cli/troubleshooting.md) - [p0 login](https://docs.p0.dev/p0-cli/troubleshooting/p0-login.md) - [p0 ssh](https://docs.p0.dev/p0-cli/troubleshooting/p0-ssh.md) - [p0 request](https://docs.p0.dev/p0-cli/troubleshooting/p0-request.md) - [p0 aws role assume](https://docs.p0.dev/p0-cli/troubleshooting/p0-aws-role-assume.md) - [p0 aws permission-set assume](https://docs.p0.dev/p0-cli/troubleshooting/p0-aws-permission-set-assume.md) - [p0 ls](https://docs.p0.dev/p0-cli/troubleshooting/p0-ls.md) - [p0 allow](https://docs.p0.dev/p0-cli/troubleshooting/p0-allow.md) - [p0 grant](https://docs.p0.dev/p0-cli/troubleshooting/p0-grant.md) - [p0 kubeconfig](https://docs.p0.dev/p0-cli/troubleshooting/p0-kubeconfig.md) - [p0 scp](https://docs.p0.dev/p0-cli/troubleshooting/p0-scp.md) - [p0 ssh-resolve](https://docs.p0.dev/p0-cli/troubleshooting/p0-ssh-resolve.md) - [2026](https://docs.p0.dev/change-log/2026.md): This page has all the current & past feature, updates and changes to the p0 app for 2026. - [2025](https://docs.p0.dev/change-log/2025.md): This page has all the current & past feature, updates and changes to the p0 app for 2025. --- # Agent Instructions This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com. ## Querying This Documentation If you need additional information, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on a page URL with the `ask` query parameter: ``` GET https://docs.p0.dev/readme.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.