Training Approve Application Access Requests
What you'll learn: the full access-request flow across two tenants — where requests start and where they're approved. You need: Administrator access type; the approval step is performed in the enterprise admin tenant. Time: 5 minutes.
Access requests are the pull counterpart to invitations: a user asks for access, and an administrator resolves the request. Importantly, the request originates in the application (or the user's profile) but is managed and approved in the enterprise admin tenant — the two steps happen in different places.
| Step | Where | Who |
|---|---|---|
| Submit the request | Application home (REQUEST ACCESS) or My Profile → REQUEST APP ACCESS | The user wanting access |
| Approve / deny | Enterprise admin tenant → Access Control → Access Requests | The enterprise administrator |
Unresolved requests expire automatically ("Tenant access request automatically expired").
- Click REQUEST ACCESS on an application's home — or open My Profile and click REQUEST APP ACCESS.
- In Create a new Tenant Access Request, your email is pre-filled. Pick the Tenant (application) and type a Request Reason, then click the orange +.
Full detail: Training: Request Access to an Application.
- Switch to the enterprise admin tenant. The ACCESS REQUESTS tile on Enterprise Admin Home counts pending requests.
-
Go to Left menu → Access Control → Access Requests — the Tenant Access Requests page lists requests across all applications, with columns for Requested For User Email, Tenant Name, Request Reason, Role Id, Submitted/Resolved/Expires At, and Status (Approved, Denied, Canceled, Expired).
- Select a pending request's checkbox, then click 👍 (approve) or 🚫 (deny) — a denial reason is recorded in the Denial Reason column.
Full detail: Training: Approve Access Requests.
The request row shows a Resolved At date; approved requests grant the requested access (and Role Id if one was specified). The user then sees the application under My Profile → My Application Access.
Training: Request Access to an Application · Training: Approve Access Requests · Training: Invite a User to an Application