Follow access from request to removal
A grant is Flow’s record of access given to someone. The connected application determines the
access that person actually has. Approval alone does not confirm that the application changed.
Manage grant records and access reviews with the
Flow command-line interface (CLI), a tool for running typed commands.
Ask an administrator to help with these steps if you do not use the CLI.
Revoke commands record the removal after you remove access in the connected application.
Understand access rules
An access service can limit who can request it, who can receive access, and how long access lasts. These checks serve different purposes:
An access profile describes who is eligible for the access. The linked access policy sets the
maximum duration and the approval and fulfillment requirements for the access service.
Request access
1
Ask for access.
Tell Flow what access you need on Home or through a connected channel.
2
Name the recipient.
Include the recipient when requesting for someone else.
3
Answer follow-up questions.
Answer any questions about justification, duration, or resource.
4
Track the outcome.
Follow the conversation for updates.
Approve access
1
Open the approval.
Select My approvals on Home or the related conversation.
2
Review the details.
Review the recipient, application, justification, duration, and earlier decisions before
approving or rejecting the request.
3
Decide.
Approve or reject the request. Under My approvals, the action is labeled Reject when
you are an approver for the stage. It is labeled Deny when you decide as an organization
administrator. The conversation header always shows Deny. All of these record the same
rejected decision.
4
Confirm fulfillment.
Approval allows fulfillment to continue. Check the related automation run to confirm that the
connected application accepted the change.