search

gravitational / teleport

The easiest, and most secure way to access and protect all of your infrastructure.
https://goteleport.com
GNU Affero General Public License v3.0
17.37k stars 1.74k forks source link

Remove Resources from Access Request - As approver #19402

Open scottpgallagher opened 1 year ago

scottpgallagher commented 1 year ago

What would you like Teleport to do? When users use resource based access requests and before submitting the request they have the ability to remove items they may have added. If approvers had that same ability to say "I approve access to these resources but am removing these resources" would be a nice to have.

What problem does this solve? Ability to not have the back and forth for users/approvers to state which resources a user can have as part of their request.

If a workaround exists, please include it. Currently approvers would need to deny the request with a message back about what resources they need to remove from their request.

philip-teleport commented 2 days ago

Another scenario to support is allowing approvers to remove resources from a previously approved request, so that the requester does not have access to that resource when they assume the role the next time.