> ## Documentation Index
> Fetch the complete documentation index at: https://syteca.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage Access Requests

> Approve or deny user access requests in Syteca from one place — endpoint logins, one-time passwords, secret usage, USB device access, and de-anonymization.

The **Access Requests** page is where Approvers process requests for access across Syteca. It has three tabs: **Access Requests** (this page), [Two-Factor Authentication](/docs/administration/access/two-factor-authentication), and [Endpoint Access Control](/docs/administration/access/endpoint-access-control).

## Request types

The **Access Requests** tab shows every kind of access request in one queue:

| Request type               | Comes from                                                                                       |
| -------------------------- | ------------------------------------------------------------------------------------------------ |
| Endpoint Access            | [Endpoint Access Control](/docs/administration/access/endpoint-access-control)                        |
| One-Time Password          | [Requesting a one-time password](/docs/administration/clients/parameters/one-time-passwords)          |
| Access to Usage of Secret  | [Connecting using a secret](/docs/pam/secrets/use-secrets)                                            |
| Mass Storage Device Access | [Requesting access to a blocked USB device](/docs/session-monitoring/usb-devices/usb-access-approval) |
| Expose                     | [Pseudonymizer](/docs/session-monitoring/masking/pseudonymizer)                                       |

The number of pending requests appears in a red badge next to the **Access Requests** navigation link.

<Note>
  A user only sees requests they're listed as an Approver for. By default, a request not processed within 30 minutes expires — change this in **Access Request Expiration Time** on the [System Settings](/docs/administration/configuration/system-settings) tab.
</Note>

## Process a request

<Steps>
  <Step title="Find the request">
    Open the **Access Requests** tab. Toggle **Display all requests** (top right) to also see past requests (Approved, Denied, Expired). Click the expand icon on a request to see its details.
  </Step>

  <Step title="Approve or deny">
    Click **Approve** or **Deny**, optionally enter a message, and click **Confirm**.

    <Note>
      If the [Pseudonymizer](/docs/session-monitoring/masking/pseudonymizer) feature and a de-anonymization password are enabled, enter that password in the pop-up as well.
    </Note>
  </Step>
</Steps>

<Frame caption="The Access Requests tab, showing pending requests to approve or deny.">
  <img src="https://mintcdn.com/syteca/FKrkO8bEqEQ6WSgs/images/pam/access/access-requests-queue.png?fit=max&auto=format&n=FKrkO8bEqEQ6WSgs&q=85&s=0f789912e83cda2129ead7b969d8724f" alt="Access Requests tab listing pending access requests" width="1910" height="760" data-path="images/pam/access/access-requests-queue.png" />
</Frame>

## Related

<CardGroup cols={2}>
  <Card title="Endpoint Access Control" icon="shield-check" href="/docs/administration/access/endpoint-access-control">
    Require approval before users log in to Client computers.
  </Card>

  <Card title="Two-factor authentication" icon="smartphone" href="/docs/administration/access/two-factor-authentication">
    Manage TOTP-based 2FA for Client logins.
  </Card>
</CardGroup>