> ## Documentation Index
> Fetch the complete documentation index at: https://docs.opal.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# End user FAQ

> Learn answers to frequently asked questions for end users interacting with Opal.

## What is Opal?

Opal is an access management platform that helps organizations securely manage access to resources. As an end user, you'll primarily use Opal to request access to resources, review your existing access, and participate in access reviews.

## How do I request access to assets?

Browse, search, and request access to assets directly from the Opal UI or Slack.

<Tabs>
  <Tab title="Opal UI">
    Request access through the **Catalog** or using the **Request Access** button. You can also find apps from the **Search** page.

    <img src="https://mintcdn.com/opalsecurity/CCjTTkaW-43B4efd/images/docs/f48a7b28a6475ab574dbe049ae35c573c2ab8386722a25c71a106dbb7867790c-app-catalog.png?fit=max&auto=format&n=CCjTTkaW-43B4efd&q=85&s=3fbe13160458a54f1e580b1f4f86f504" alt="" width="2632" height="1320" data-path="images/docs/f48a7b28a6475ab574dbe049ae35c573c2ab8386722a25c71a106dbb7867790c-app-catalog.png" />

    After selecting an app, you can choose **Resources** that you want to request. **Resources** are specific permissions within applications. Example resources include:

    * Salesforce: Roles, profiles, and permission sets
    * GitHub: Repositories, Teams
    * Amazon Web Services: IAM Roles, databases (RDS), and compute (EC2)

    To make a request, open the resource and select **Request** in the **Actions** column, or select **Request Access** in the sidebar.

    <img src="https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/bbad1ce426b646425e555d16e671a3072c58823c162a491856708dce01832154-request-access.png?fit=max&auto=format&n=lwwIeFbsleftxaXx&q=85&s=a13afb38f12c4e9466c718a521675c1d" alt="" width="2504" height="1408" data-path="images/docs/bbad1ce426b646425e555d16e671a3072c58823c162a491856708dce01832154-request-access.png" />

    Enter the following fields:

    * **Reason**: By default, this is a required field. Admins can hide this field using the [request configuration](/docs/organize-access-via-tags) settings. Ensure you include enough context in your reason for your reviewers to approve your request.
    * **Expires in**: Specify how long you need access. Use the default values, or request a custom range by selecting **Custom**.
    * **Expire access when ticket is closed**: If you don't know how long you'll need access, you can bind the access request to a support ticket that is assigned to you. Once the ticket is completed, your access will be automatically revoked.

          <img src="https://mintcdn.com/opalsecurity/E-CmJXh0QNjZUl4g/images/docs/5fb2561b02e7b25d1ae74292a0c123fdcd8582e4f07c4274d56311c5fe6625d5-app-catalog-request-modal.png?fit=max&auto=format&n=E-CmJXh0QNjZUl4g&q=85&s=eebdd825840fbcad1757c3cf2ea61126" alt="" width="2252" height="1538" data-path="images/docs/5fb2561b02e7b25d1ae74292a0c123fdcd8582e4f07c4274d56311c5fe6625d5-app-catalog-request-modal.png" />

    You may request access on behalf of another user. For security reasons, this functionality is limited to the following groups.

    * **Opal Admins** can request access on behalf of all users for all resources.
    * **Resource and group admins** can request access on behalf of others for those resources and groups where they are an admin.
    * **Managers** can request access on behalf of their reports for those resources to which the manager has access.
  </Tab>

  <Tab title="Slack">
    You can navigate Opal assets and submit access requests directly in Slack using the `/opal` slash command.

    ### Search for requestable assets (recommended)

    Run this search command from any Slack channel to find requestable assets.

    <CodeGroup>`/opal search <term>`</CodeGroup>

    Select an asset from the results to start an access request, or click **View results on web** to see the full list of results on the web UI.

    <img src="https://mintcdn.com/opalsecurity/MtuHXQ82QqdFjYBV/images/docs/opal_search_ephemeral_example.png?fit=max&auto=format&n=MtuHXQ82QqdFjYBV&q=85&s=39cdc4e02e714389f701c260f192bad0" style={{ width: "450px", height: "auto", margin: "auto" }} alt="Example of the /opal search command in Slack" width="1370" height="686" data-path="images/docs/opal_search_ephemeral_example.png" />

    ### Browse available assets

    Run the command by itself to browse assets by App.

    <CodeGroup>`/opal`</CodeGroup>

    <img src="https://mintcdn.com/opalsecurity/MtuHXQ82QqdFjYBV/images/docs/slack_request_modal.png?fit=max&auto=format&n=MtuHXQ82QqdFjYBV&q=85&s=b9563aff20ee880cfed6f1a3891299cc" style={{ width: "450px", height: "auto", margin: "auto" }} alt="Image of full request modal in Slack" width="858" height="1056" data-path="images/docs/slack_request_modal.png" />

    ### Using `/access` instead

    Both commands work identically—use whichever you prefer:

    * `/access` (opens browse modal)
    * `/access search <term>` (searches directly)
  </Tab>
</Tabs>

## What happens after my access request?

Once approved, you'll be notified over email and in Slack. Go to **My Access** in the Opal web **Catalog** to view all resources you currently have access to.

If you want to learn more about your request, you can click on the **Access request pending** button in Slack, or go to the **Requests** page in the Opal dashboard.

From here you can:

* See the status of your request
* See who the reviewers are
* Send reminders to your reviewers
* Cancel your request
* Escalate approval of your request to your skip manager by clicking **Escalate to skip manager**

<img src="https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/d480d1884515336a40970e50d3aac58ee601975cd0b8cf1e6927d21f531f93d0-Screenshot_2025-05-16_at_8.42.54_AM.png?fit=max&auto=format&n=lwwIeFbsleftxaXx&q=85&s=2bc95f27c9a0f83525c2bf0d5432acf1" alt="" width="1596" height="1412" data-path="images/docs/d480d1884515336a40970e50d3aac58ee601975cd0b8cf1e6927d21f531f93d0-Screenshot_2025-05-16_at_8.42.54_AM.png" />

## How can I escalate my request?

If your approver is your manager, you can escalate your request to your skip manager by selecting **Escalate to skip manager** on the request. Your skip manager will be notified to approve your request. This is especially useful if your manager is unavailable and your request is urgent.

<img src="https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/d2d840bc111a46eaa6e4c22357599b3b96928a93ad088c16adbf325fd6f68f6d-Screenshot_2025-05-16_at_8.50.00_AM.png?fit=max&auto=format&n=lwwIeFbsleftxaXx&q=85&s=d4acbb0f4f229ce88f6d4bab3ec9b358" alt="" width="1542" height="380" data-path="images/docs/d2d840bc111a46eaa6e4c22357599b3b96928a93ad088c16adbf325fd6f68f6d-Screenshot_2025-05-16_at_8.50.00_AM.png" />

## How do I check the status of my access request?

You can view the status of your access requests in the **Sent** tab of the **Requests** page. Each request shows its current status (Pending, Approved, Denied, etc.) and any pending approval steps.

## How long does my access request take to process after it's approved?

Most approved access requests are propagated to end systems within two minutes.

## How can I approve access requests?

You will be notified via Slack and email if you are a reviewer. In Slack, approvers can approve or reject access requests. This automatically provisions access.

<img src="https://mintcdn.com/opalsecurity/CCjTTkaW-43B4efd/images/docs/f6a5283-Screen_Shot_2022-08-24_at_2.43.55_PM.png?fit=max&auto=format&n=CCjTTkaW-43B4efd&q=85&s=eee83f4b401724deeb2a1f44dab965d1" alt="" width="1872" height="570" data-path="images/docs/f6a5283-Screen_Shot_2022-08-24_at_2.43.55_PM.png" />

Requestors and requestees can also leave comments in Slack. Replies in the thread via Slack will show as comments in Opal. These comments bi-directionally sync with Opal's web UI.

<img src="https://mintcdn.com/opalsecurity/lwwIeFbsleftxaXx/images/docs/c36d8a343d2006a03c8b0fc682c76003bbbe2697b51d4a2f3ee9e71052c5a735-pending-request-admin.png?fit=max&auto=format&n=lwwIeFbsleftxaXx&q=85&s=94e5cf9006b8bacb015f22dd4143b3f8" alt="" width="3254" height="1412" data-path="images/docs/c36d8a343d2006a03c8b0fc682c76003bbbe2697b51d4a2f3ee9e71052c5a735-pending-request-admin.png" />

## Can I approve my own access requests?

No. Currently access requests can not be approved by the submitter. Users are blocked from creating request conditions where they are the only possible approver, and submitters do not receive approval notifications for assets that they have requested where they are also a member of the approval owner.

## What happens if my access expires?

If you have been granted short-lived access to a resource and the time limit has expired, then Opal will automatically revoke your access.

<img src="https://mintcdn.com/opalsecurity/odnvD_MsXBxTor9u/images/docs/83fd592d4bf5f7ac79b5ef828f8ceff2edb18fa948d2c6d8ac781dc108949bdd-re-request-access.png?fit=max&auto=format&n=odnvD_MsXBxTor9u&q=85&s=6ed880557582910d0f797360a74cc6b7" alt="" width="1929" height="480" data-path="images/docs/83fd592d4bf5f7ac79b5ef828f8ceff2edb18fa948d2c6d8ac781dc108949bdd-re-request-access.png" />

If your request is for more than 24 hours, Opal will send out notifications one day and one hour before to remind you to extend access. You will only receive a reminder notification if your access originated from a request. You will not get a notification if you were manually added to the resource or group by an admin.

<img src="https://mintcdn.com/opalsecurity/4Xj9diJ3E3kX-9Xd/images/docs/e37d31a-Screen_Shot_2022-09-19_at_10.48.28_AM.png?fit=max&auto=format&n=4Xj9diJ3E3kX-9Xd&q=85&s=7c0cad49ed37f0a01f3e4d44f39e9a45" alt="" width="1450" height="228" data-path="images/docs/e37d31a-Screen_Shot_2022-09-19_at_10.48.28_AM.png" />

If your organization has enabled it, you may be able to extend your access from Slack or the Opal UI. Extended access does not need to be approved again.

<img src="https://mintcdn.com/opalsecurity/TlQj9FwRe9HHNEYB/images/docs/0ccf3a74073a5bf8a0a2a4abf6b194f6be53b03455aeebe8b182c2297742c1c3-favorites-req-extensions.png?fit=max&auto=format&n=TlQj9FwRe9HHNEYB&q=85&s=0d7178ab913bba98d124d1c12d01b625" alt="" width="3408" height="1475" data-path="images/docs/0ccf3a74073a5bf8a0a2a4abf6b194f6be53b03455aeebe8b182c2297742c1c3-favorites-req-extensions.png" />

When your access expires after the requested duration, Opal sends you a Slack notification with a link to easily re-request.
