> ## Documentation Index
> Fetch the complete documentation index at: https://docs.opal.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Bundles

> Learn how to use bundles to group commonly used resources.

Admins can create bundles—collections of resources and groups, contextualized by anticipated usage—to allow users to easily request access to common collections, without over-provisioning access.

A bundle is a wrapper for resources. Any resource or group contained in a bundle retains its established policies and configurations. Adding an item to a bundle does not change its admin, owner, approval policies, or visibility settings.

For example, given:

* Bundle B contains resources X and Y
* Resource X is only visible and requestable to users in group G

If user U is not in group G, they can request access to bundle B, but only resource Y will be visible and requestable in the bundle.

You can manage bundles in the Opal dashboard, using the [REST API](/reference/getbundles), or with [Terraform](https://registry.terraform.io/providers/opalsecurity/opal/latest/docs).

## Create and manage bundles

You must be an Opal admin to create a bundle.

### Create bundles

Go to the **Inventory** and select the **Bundles** tab.

<img src="https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/baafe4559cd4502f78611183d694bc36915e60a3fd630ede1382ad5486b08a59-inventory-bundle-tab.png?fit=max&auto=format&n=lwwIeFbsleftxaXx&q=85&s=74328d03eec0b267a3e5e4d30f57182f" alt="" width="2442" height="895" data-path="images/docs/baafe4559cd4502f78611183d694bc36915e60a3fd630ede1382ad5486b08a59-inventory-bundle-tab.png" />

Click on the **+ Bundle** button.

<img src="https://mintcdn.com/opalsecurity/lt0M-hBs5yNe5ff5/images/docs/aa82783a1ce550cdfa4eb2d9fab2dc699086c971b0c0ce766a6c2325645ce4d8-inventory-bundle-new.png?fit=max&auto=format&n=lt0M-hBs5yNe5ff5&q=85&s=c9671f77922fbf4cf43d10aac83b4980" alt="" width="2442" height="895" data-path="images/docs/aa82783a1ce550cdfa4eb2d9fab2dc699086c971b0c0ce766a6c2325645ce4d8-inventory-bundle-new.png" />

Name your bundle and add an optional description:

<img src="https://mintcdn.com/opalsecurity/KunPWigry5GIeB5g/images/docs/428116b-ScreensCreate-bundlehot_2024-03-01_at_12.03_1.png?fit=max&auto=format&n=KunPWigry5GIeB5g&q=85&s=43fa3aede1d89830785ba86f79d8810f" alt="" width="2958" height="1658" data-path="images/docs/428116b-ScreensCreate-bundlehot_2024-03-01_at_12.03_1.png" />

### Set an admin

Select an Opal Owner to own adding and removing items from the bundle.

The admin does not gain permission to directly add users to any resources and groups contained in the bundle.

<img src="https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/d7a0cad-bundle-setAdmin.png?fit=max&auto=format&n=lwwIeFbsleftxaXx&q=85&s=405c61d8ba9e08aa40f712bc850b5ebb" alt="" width="2958" height="1658" data-path="images/docs/d7a0cad-bundle-setAdmin.png" />

### Add resources and groups

After you create the bundle, use the **Resources** and **Groups** tabs to add items to the bundle.

## User flow: request bundles

Go to the **Catalog** and select the **Bundles** tab. Click on the appropriate bundle.

### Bulk select

Select the resources you need Opal to bulk request.

<img src="https://mintcdn.com/opalsecurity/4Xj9diJ3E3kX-9Xd/images/docs/df213b0dcea23d79f49dc89afb785c681104bc6db132fa3b60eb6056cd5fa2a9-request-bundle.png?fit=max&auto=format&n=4Xj9diJ3E3kX-9Xd&q=85&s=20571bab31f1ad445fc7ffdbc9d0397c" alt="" width="3760" height="1736" data-path="images/docs/df213b0dcea23d79f49dc89afb785c681104bc6db132fa3b60eb6056cd5fa2a9-request-bundle.png" />

### Bulk request

In the request form, delete any resources you don't need and submit your bulk request.

<img src="https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/c86a2d8d763c8c12d94c543401cab4d7d2e740fba47258531d757347dce39e12-bundle-request.png?fit=max&auto=format&n=lwwIeFbsleftxaXx&q=85&s=ba18a7976178a1414903e645feb424d7" alt="" width="3659" height="1842" data-path="images/docs/c86a2d8d763c8c12d94c543401cab4d7d2e740fba47258531d757347dce39e12-bundle-request.png" />

Approved access from bundle requests is propagated only after all items in the bundle have been approved.
