:_mod-docs-content-type: ASSEMBLY
[id="approved-access"]
= Approved access

include::_attributes/common-attributes.adoc[]
ifdef::openshift-dedicated[]
include::_attributes/attributes-openshift-dedicated.adoc[]
endif::[]
:context: approved-access

toc::[]

[role="_abstract"]
You can use the Approved Access feature to review, approve, or deny elevated access requests from Red{nbsp}Hat Site Reliability Engineering (SRE) to your {product-title} cluster resources.

Red{nbsp}Hat SRE typically does not require elevated access to systems as part of normal operations to manage and support {product-title} clusters. Elevated access gives SRE the access levels of a cluster-admin role.

SRE creates elevated access requests either in response to a customer-initiated support ticket or in response to alerts received as part of the standard incident response process.

When Approved Access is enabled and an SRE creates an access request, cluster owners receive an email notification informing them of a new access request. The email notification contains a link allowing the cluster owner to quickly approve or deny the access request. You must respond in a timely manner otherwise there is a risk to your service-level agreement (SLA) for {product-rosa}.

* Pending access requests are available in the {hybrid-console-second} on the clusters list or *Access Requests* tab on the cluster overview for the specific cluster.

[NOTE]
====
Denying an access request requires you to complete the *Justification* field. In this case, SRE cannot directly act on the resources related to the incident. Customers can still use *Customer Support* to help investigate and resolve any issues.
====

include::modules/support-submitting-a-case-enable-approved-access.adoc[leveloffset=+1]

include::modules/support-reviewing-an-access-request-from-an-email-notification.adoc[leveloffset=+1]

include::modules/support-reviewing-an-access-request-from-the-hybrid-console.adoc[leveloffset=+1]

[role="_additional-resources"]
[id="additional-resources_{context}"]
== Additional resources

* xref:../rosa_cluster_admin/rosa-cluster-notifications.adoc#add-notification-contact_rosa-cluster-notifications[Adding notification cluster contacts]
* link:https://docs.openshift.com/container-platform/latest/authentication/using-rbac.html#default-roles_using-rbac[Cluster roles]
* link:https://access.redhat.com/support/cases/#/case/list[Customer Support]
