# Just-In-Time Access

Use just-in-time access to give tailored, short-lived privileges to specific resources on demand.

### Benefits of just-in-time access

* Reduce your IAM attack surface by only holding privileges when they are in use.
* Grant access more quickly; the mean time between making an access request and gaining access using P0, including approval, is 5 minutes.
* Request and grant access based on operations (like reading a bucket), eliminating the need to craft custom roles and policies, and preventing incorrect access grants.

### How it works in P0

Once you connect P0 to your organization's Slack and an IAM resource, any member of your organization can request access by typing `/p0 request` in Slack. No further set-up is required.

Here's what it looks like:

<figure><img src="/files/hWevj6Ab2ol9xFuNjwon" alt="Animated demo of a just-in-time access request flow using the /p0 request Slack command, showing request, approval, and access grant" width="543"><figcaption></figcaption></figure>

Requests can be approved by managers, resource owners, or automatically by integrations such as PagerDuty. You can discuss justification for each request in Slack. Access requests, together with their justifications, approval, grant, and revocation histories are recorded by P0, and can be exported to your SIEM.

### Related documentation

* [Just-in-time access overview](/access-management/just-in-time-access.md) — Configure and manage JIT access workflows
* [Requesting access](/access-management/just-in-time-access/requesting-access.md) — Learn how to request access via Slack or the web app
* [Approving access](/access-management/just-in-time-access/approving-access.md) — Set up approval workflows and pre-approvals
* [Request routing](/access-management/just-in-time-access/request-routing.md) — Route, auto-approve, or deny requests based on policies
* [P0 CLI commands](/p0-cli/p0-commands-and-usage.md) — Request and manage access from the command line

### Get started with just-in-time access

Getting started with just-in-time access takes about 15 minutes. Follow the [quick-start guide](/getting-started/getting-started-with-just-in-time-access.md).


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.p0.dev/readme/just-in-time-access.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.