What the agent can do
Request access
Check current access
Extend access
Show eligibility
Enabling software access requests
Open the agent
Go to the Identity tab
Find Advanced Settings
Toggle software access requests on
How it works
When a user asks for access, the agent looks up:- Applications the user is eligible to request (based on access policies and group membership)
- Available access levels for each application
- The user’s current active entitlements
- Policy requirements like access duration and business justification
- If the user already has access, the agent informs them and asks if they want a different level or an extension
- If only one access level exists, it is automatically selected
- If business justification is required by the policy, the agent asks for it
- If the policy lets the requester pick a duration, the agent presents the choices. On a fixed duration or no expiry, it does not ask.
Writing agent rules for access requests
Create rules to guide your agent’s behavior for access request scenarios.When a user requests access to an application, ask which application they need and their business justification. Then use @List Applications to find the application. Present the appropriate access request form with details prefilled.
When a user asks about their current access, use @List Applications to check their active entitlements. Tell them what access they have, when it expires (if applicable), and offer to help extend or request additional access.