Software access policies

App access requests show up as chat messages, you chase someone down to approve them, and nobody’s set to pull the access back once it’s no longer needed. A chunk of IT’s ticket time goes to this, approvers get pinged whenever it comes up, and a contractor’s temporary access quietly turns permanent.

Now you set a policy per app for who approves it and how it’s revoked, and June runs the request from the Slack message to the revocation.

Policy builder

For each application, set the grant and revoke steps, using an Okta or Google group, or a manual step. Delete policies that have never been used.

Approvals

Route requests to approvers, with nudges and escalation levels for when an approver does not respond.

Request access in Slack

Employees request access with /june access in a DM with June: pick the application and access level, give a reason if the policy asks for one, and choose a duration for time-bound access.

Time-bound access

June revokes access when the requested time is up, and shows the exact revocation deadline.

Access requests

Each policy has an Access requests tab. Search and filter requests by status, and open one to see its full journey: approvals, fulfillment and activity. From a request, IT can override an approval, complete a manual step, retry a failed step, or revoke access.

Improvements

• Service accounts Can now set a manager on a service account from its employee profile.
• Service accounts People’s managers still come from the identity provider.
• AI usage Added each person’s most-used model, with the full model breakdown on hover, and a filter by model.
• Applications Added Source and Platform columns to the CSV export.
• Applications The Source column shows and filters “Added manually”, “Added via chat” and “Browser extension”.
• Navigation Added breadcrumbs on detail pages across the app.
• Runbooks The editor keeps showing validation progress.
• Runbooks The editor separates problems you need to fix from temporary failures.
• Runbooks Findings link to the employees, devices and apps they mention.
• Reachouts Lists load as you scroll, and show totals when filters are on.
• Signals Redesigned as a split workspace.
• Forms Surveys are now called Forms.

Fixes

• Okta Fixed app access granted through a group showing as “Direct”.
• Okta Fixed long group names scrolling instead of truncating.
• Runbooks Fixed scheduled runbooks using “today” or relative date ranges failing validation.
• Runbooks Fixed runs finishing before every step was done.