Set prerequisite permissions in Entitle to automatically grant a required permission alongside any requested permission that depends on it. For example, if database access requires VPN access, set the VPN role as a prerequisite. When a user requests database access, Entitle checks whether they have VPN access and grants it if they don't.

• You can require a single prerequisite or offer multiple alternative roles, where a user only needs one of them to satisfy the requirement.
• Prerequisites granted with a request also expire with that request, so no orphaned access is left behind when the original permission is revoked.
• Permissions granted through bundles or birthright policies also receive their required prerequisites, so dependencies are never missed regardless of how access is granted.
• You can set prerequisite permissions at three levels: integration, resource, and role.

ℹ️

Set prerequisite permissions via API

You can also set prerequisite permissions via the prerequisitePermissions field, supported on these endpoints:

Create a new integration
Get integration by ID
Update integration by ID
Get a resource by ID
Update a resource
Get a role by ID
Update a role

Add prerequisite permissions to an integration

1. In Entitle, navigate to Integrations, then select an integration.
2. Click Add under Prerequisite permissions.
3. Select the Integration, Resource, and then Role to add a prerequisite role.
4. Click Save permissions.
5. Repeat as needed to add multiple prerequisite roles.
6. (Optional) Click the + icon in the row of a prerequisite permission to add an alternative role. When a row has multiple roles, the user only needs one of them, not all (an Or requirement).

Add prerequisite permissions to a resource

1. In Entitle, navigate to Integrations, then select an integration.
2. Expand Resources, then select a resource.
3. Add prerequisite permissions, as described in this article.

Add prerequisite permissions to a role

1. In Entitle, navigate to Integrations, then select an integration.
2. Expand Resources, then select a resource.
3. Expand Roles, then select a role.
4. Add prerequisite permissions, as described in this article.

Delete a prerequisite permission

1. In Entitle, navigate to Integrations, then select an integration, resource, or role.
2. Expand Prerequisite permissions and select the X next to the permissions you want to remove.