🔀Policy Studio

Configure the access policies and Access Bundles that decide who can request which resources, and how those requests get approved.

Policy Studio is where you configure your organization's just-in-time access rules: access policies that route and approve individual resource requests, and Access Bundles that group several resources into one requestable item.

This section covers everything you need to configure and manage both:

• Configuring access policies: the complete guide covering the Policy Studio walkthrough, the full policy format reference (requestors, resources, filters, and approvals), worked scenarios, and how P0 evaluates requests.

• Access bundles: group multiple resource accesses into a single requestable item, so a user requests everything a task needs in one step.

• AWS filtering, Google Cloud filtering, Microsoft Azure filtering, and SSH filtering: narrow which resources within each integration can be requested.

• Agentic access policies: route or auto-approve requests made by AI agents through the P0 AI Gateway.

Policy Studio in the app

To use Policy Studio, go to p0.app and navigate to Policy Studio. Select Control to configure access policies, or Access Bundles to group resources into a single requestable item. Saving a policy configuration here configures your organization to use policy-based approvals, rather than default approvals.

Manage access policies programmatically

You can also manage access policies without using Policy Studio:

• Access policies API: create, read, update, and delete policies over HTTP. Use this to script incremental changes or to build policy management into your own tools.

• Terraform provider: manage policies as version-controlled, reviewable configuration with the p0_access_policy resource, alongside your RBAC role assignments and JIT access settings.

All three methods manage the same access policy configuration, so a change made through one is reflected in the others. Access Bundles are configured only in Policy Studio, and can't be managed through the API or the Terraform provider.

New to Policy Studio?

Start with the Configure your first access policy tutorial for a hands-on walkthrough of access policies. For the full policy format, worked scenarios, and evaluation order, see Configuring access policies. To group several resources into a single requestable item, see Access bundles.