search

hashicorp / boundary

Boundary enables identity-based access management for dynamic infrastructure.
https://boundaryproject.io
Other
3.83k stars 281 forks source link

Approvals Workflow #3084

Open alirezarpi opened 1 year ago

alirezarpi commented 1 year ago

Is your feature request related to a problem? Please describe. None-related

Describe the solution you'd like As you said in CONTRIBUTING "Before writing a line of code, please ask us about a potential improvement or feature that you want to write into Boundary", I want to add a feature to Boundary which is named ask-for which user (dev role) requests (or asks for) accessing to a specific Target which doesn't have access to use and this request bumps-up to a admin(s) (sysadmin role) and the admin either accepts or denies the request. If accepted, the user will be granted with the Target permission.

Describe alternatives you've considered None-related

Explain any additional use-cases This feature will be available in all platforms (cli, web-ui and desktop) for clients and the request notification for admin can be integrated with slack for e.g (Yes/No box pop-up)

Additional context None-related

xingluw commented 1 year ago

Hi @alirezarpi, it sounds like you are looking for an approvals workflow inside of Boundary, something that we are aware of and on the long term roadmap. I will leave this open to collect community upvotes.

On a related note, Boundary does support REST API workflows from external sources. For example, you could set up a ServiceNow process (flow designer) to request permission for access, have that change Boundary group settings to grant a user access, and have that access revoked after a period of time.