Skip to main content
When Software Access Requests is enabled on an agent, the agent can help users request new application access, check their current access status, and extend expiring access through natural conversation.

What the agent can do

Request access

Users describe what they need and the agent presents the right form with eligible applications and access levels prefilled.

Check current access

Users ask about their access and the agent shows what they currently have, including expiration dates.

Extend access

When access is expiring, the agent can offer to submit a renewal request.

Show eligibility

The agent knows which applications and access levels the user is eligible for based on their group membership and access policies.

Enabling software access requests

1

Open the agent

Navigate to Agents in the sidebar and select the agent you want to configure.
2

Go to the Identity tab

Select the Identity tab on the agent configuration page.
3

Find Advanced Settings

Scroll down to the Advanced Settings card.
4

Toggle software access requests on

Toggle Software Access Requests on.
The toggle only appears once access provisioning is configured for your organization. If you have not set up applications and access levels yet, start with the setup guide.

How it works

When a user asks for access, the agent looks up:
  • Applications the user is eligible to request (based on access policies and group membership)
  • Available access levels for each application
  • The user’s current active entitlements
  • Policy requirements like access duration and business justification
The agent uses this context to guide the conversation:
  • If the user already has access, the agent informs them and asks if they want a different level or an extension
  • If only one access level exists, it is automatically selected
  • If business justification is required by the policy, the agent asks for it
  • If the policy lets the requester pick a duration, the agent presents the choices. On a fixed duration or no expiry, it does not ask.

Writing agent rules for access requests

Create rules to guide your agent’s behavior for access request scenarios.

When a user requests access to an application, ask which application they need and their business justification. Then use @List Applications to find the application. Present the appropriate access request form with details prefilled.

When a user asks about their current access, use @List Applications to check their active entitlements. Tell them what access they have, when it expires (if applicable), and offer to help extend or request additional access.


Learn more about agent configuration
Last modified on August 5, 2026