Access Requests & Approvals

Add an access request and approval flow to your app with Permit.io. Your users request access to parts of your application, and admins review, approve, or deny those requests.

---

What are Permit Elements?

Permit Elements are embeddable UI components for access management. They let your users handle access requests and approvals inside your app, while your policy in Permit decides who can do what.

You add permission management to your app without building the UI yourself.

A demo of Permit Elements

---

1

Configuring your JWKS

Configure JSON Web Key Sets (JWKS) for your environment. A JWKS is a set of public keys used to validate JSON Web Tokens (JWTs), confirming that each token is legitimate and comes from a trusted issuer.

With JWKS configured, the public keys needed for token verification are fetched automatically, so only properly authenticated users can log in to the elements.

2

Setting up Permit and Elements

Integrate Permit into your app: install the dependencies, set up the Policy Decision Point (PDP), and configure your app to use them. At the end of this step, your app enforces permissions through Permit.

3

Building the Authorization Policy

Decide what your users can do in your app: create resources, define roles, and specify the actions users can take on those resources. Then assign the roles to your users, so each user gets the access they need.

4

Configuring Elements

Customize Permit Elements to fit your app's design and workflows. You can change both how the elements behave and how they look.

This step covers the main customization options: adjusting workflows and changing visual styles to match your app's user interface.

5

Embedding the Elements in our App

Embed the Permit Elements in your app. First, add the generated iframe snippet to your app's codebase.

Then log users in to the element, so it acts on behalf of the signed-in user.

You have installed the dependencies, set up the Policy Decision Point (PDP), and configured Permit for your app.

Your users can now request access, and your admins can approve or deny requests, from inside your app.

What did you learn?

You learned how to:

• Integrate access requests and approvals into your app with Permit Elements.
• Configure key components like JWKS and the Policy Decision Point for secure workflows.
• Customize and embed Permit Elements to match your app's design and functionality.

Congratulations! 🎉

You have officially mastered all walkthroughs.