Shine a light on shadow apps

ConductorOne Docs

Request a new app or permission

You can request access to apps and permissions through the ConductorOne web app, or through Slack.

Request new access using the ConductorOne app

Your company uses ConductorOne to manage software access requests. Whenever you need access to a certain application, or access to a permission like a group, repo, or role within an app (these care called resources), make a request through ConductorOne.

  1. Sign into ConductorOne.

  2. At the top of the page, click + Request access.

  3. Select an application from the Which app? dropdown, which shows all the apps that are available for you to request.

    Why don’t I see all the apps my company uses? For both simplicity and security, the list of apps you can request is limited. If you’re in the Accounting department, you probably don’t need access to the tools the Product Design team uses, or vice versa.

    The ConductorOne admins at your company created groups of apps (these are called catalogs). Some catalogs are visible to everyone, but others are just for certain departments or job types. The catalogs you have access to determine which apps you can see and ask for.

  1. Select the specific access you need. Based on the type of access available to you (and what you already have), you might be asked if you need:

    • Basic app access: Choose this option if you’re looking for a new account on an app you’re using for the first time.
    • A specific role, group, or resource: Choose this option if you have an account on the app but need access to something more specialized.

    Wait, my request form looks different. Don’t worry. If your request form has fewer options, it means that because of your current access grants or the available resources on the app you’ve chosen, we can streamline the form for you and get you on your way.

  1. Set how long you need the access for. Some sensitive or expensive resources can only be requested for a limited time. You can choose from one of the pre-set options, or enter a custom timeframe by selecting Custom.

  2. Tell the reviewer why you’re requesting this access. This helps them make their decision.

  3. If the emergency access toggle is present: The access you’re requesting is available for emergency access requests. If you’re requesting this access to address an emergency (as defined by your company’s critical incident or emergency procedures), enable the Emergency access toggle.

    Emergency access requests bypass the normal review procedure and use a special expedited process to grant requests to critical access in emergency situations. Your company’s IT procedures will define when it’s appropriate to request emergency access.

    Can I escalate an open access request to emergency access? You can! If you requested standard non-emergency access, but realize you need emergency access while the request is still open, go to the request and click Escalate to emergency access.

  1. Click Submit request.

That’s it! The request is created and added to your Open requests list. You can view the status of the request there and see who the assigned reviewers are. You can also leave a comment on your request if you need to.

ConductorOne will send you an email when your request is approved or rejected, and another when the new access is granted.

Request new access using Slack

If your company uses Slack and an admin has added the ConductorOne Slack app, you can request new access and receive notifications directly from the platform.

Add the ConductorOne Slack app

Before you begin: A Slack administrator at your company must integrate Slack with ConductorOne by visiting the ConductorOne Integrations page and clicking Slack in the Collaboration integrations section at the top of the page.

  1. In Slack, navigate to the Apps section of the navigation bar.

  2. Click Add apps and search for ConductorOne.

  3. Click the ConductorOne app and follow the prompts to add it to your Slack workspace.

That’s it! You can now interact with ConductorOne directly from Slack.

Create an access request

  1. Go to the ConductorOne Slack app and click the Home tab.

  2. Click Request Access.

  3. Select an application from the Which app do you need? dropdown, which shows all the apps that are available for you to request.

    Why don’t I see all the apps my company uses? For both simplicity and security, the list of apps you can request is limited. If you’re in the Accounting department, you probably don’t need access to the tools the Product Design team uses, or vice versa.

    The ConductorOne admins at your company created groups of apps (these are called catalogs). Some catalogs are visible to everyone, but others are just for certain departments or job types. The catalogs you have access to determine which apps you can see and ask for.

  1. Select the specific entitlement (permission) you need. If you’re looking for a new account on an app you’re using for the first time, choose Access.

  2. If asked, specify how long you need the access for. Some sensitive or expensive resources have limited duration requirements, others can be requested indefinitely (if you’re requesting one of these, you won’t be asked about a duration).

  3. Tell the reviewer why you’re requesting this access. This helps them make their decision, and becomes a note in the audit log of all the access granted to all the company’s employees.

  4. Click Submit.

That’s it! You’ll immediately get a new access request notification on the Messages tab of the Slack app.

This is also where you’ll be notified when your new access is granted.

If you want to see the access request task with all its details, click the blue Grant [your name] [your requested access] link in the notification to go to the request’s details page in the ConductorOne web app.