Keycyte PAM 3.2 · User Guide

Requesting Access

Your administrator can configure a server, an account, or both, so that you need approval before you connect (just-in-time access). When you select such an account without a valid approval, the Send Request panel opens instead of the session.

An approval is valid for the time window that the approver confirms. You can connect without a new request while the approval is valid.

Sending an Access Request

To send an access request:

1. Open the server and click the account, as described in Opening a Browser Session.

   The Send Request panel opens.

2. Fill in the request:

   Field	Description
   Reason	Why you need access, for example a change or ticket number. The approver sees this text.
   Start Date	The date and time from which you need access.
   End Date	The date and time until which you need access.

3. Click Send Request.

The request is sent and the panel closes. To cancel without sending, click Cancel.

What Happens After You Send a Request

1. Keycyte PAM records the request and adds it to the approval queue of the administrators responsible for the server (for a server approval) or for the account (for an account approval). If both the server and the account require approval, a request is created for each of them.
2. The responsible administrators receive an Access Permission Request email, if an email address is known for them.
3. An administrator approves or rejects the request in the Admin Panel. The approver can adjust the time window.
4. When the request is approved, you receive an Access Permission Approved email, if an email address is known for your account.
5. Within the approved time window, open the server and click the account again. The session starts without the Send Request panel.

Outside the approved time window, or if the request was rejected, the Send Request panel opens again when you select the account.