# Review access requests against your access policy, with approval

Send an employee's access request in their own words. The agent checks it against the access policy you write into the prompt (least privilege, a stated business reason and a time limit) and passes that assessment to an owner or admin as advice. Every request needs a person's approval: only requests they approve are sent to your provisioning webhook. The check reads only the request text, so the requester named in the request is not verified, and nothing looks up the person's role or current access.

**Use cases:** Security, Engineering and IT

**Tags:** access request, least privilege, permissions, identity, IAM, approval, human in the loop, provisioning, webhook

[Create this agent](https://seclai.com/agent-examples/create/access_request_review)

## How it starts

Trigger: dynamic input.

## What it needs

No knowledge base, memory bank or connection to create first.

## Steps

- Check the request against the policy
- Parse and validate the check
- Approve or deny the request
- Was it approved?
  - If yes: Send the approved request to provisioning
- Show the check and the decision