Lifecycle & Access Governance
Request Access
Request access for yourself or another user, and submit every item in one cart.
Completes when the privilege is granted for the dates requested.
https://mcp.avatier.com/mcp
Ask in Plain Language
Run Request Access from the AI Assistant You Already Use
Same policy, approvals and Justification as the console. One completed access request = one Secure Outcome; failed attempts are never billed.
You: Request Salesforce and finance share access for my new hire, starting Monday. Avatier: policy: applied · for: another user · start: Monday · cart: 2 items · requests: recorded
Why it matters
Access Requests That Live in Email and Tickets Can't Keep an Audit Clean.
Every request needs the right privilege, the right person, the right dates and a reason an approver and an auditor can read.
What a request needs
A privilege found by search or browse, requested for yourself or another user, with a justification, a start date and an end date.
What goes wrong by hand
A manual process leaves access verification hard for managers, security professionals, and auditors to see.
Why it matters now
Without a governed request path, grandfathered access, orphaned accounts, and unnecessary access to critical systems can go unnoticed.
What per-seat pricing charges
Per-seat IAM charges for every licensed seat, whether anyone requests access this month or not. Pay Per Identity Action™ charges only for completed requests.
The Action
How Request Access Runs
Requests for yourself and for another user run through the same cart.
Find the Access
Search or browse privileges.
Choose Who It Is For
Pick "For me" or "For another user".
Fill in the Form
Add a justification, a start date and an end date, a provisioning password and any additional info.
Add to Cart
Add each item to the Request Cart.
Submit All
Submit every item in the cart at once. The Results screen shows a Request ID per line.
Approval
Where your policy calls for approval, approvers act on the request in Workflow Approver's Pending Requests.
Approval point
Available on Web, Avabot chat and MCP.
Secure Outcome
What Counts as Done
A Secure Outcome is a completed, verified, policy-compliant identity action. An access request completes when the privilege is granted for the dates requested. One completed access request = one Secure Outcome.
Evidence
- A Request ID per line
- Request History with Export
- Activity and audit logs
Guardrails
Your Assistant Asks. Avatier Decides.
Verified First
Avatier verifies the person before sensitive changes, with the methods your policy already allows.
Same Policy as the Console
Approvals, justification and role rules apply exactly as they do on the web.
Acts as the Signed-In User
OAuth sign-in to your own tenant. No shared service account, no API key to manage.
Never Makes Up Values
The connector only sends what the person actually said, and asks when something is missing.
Every Request Recorded
Requests land in Request History, ready to review and export.
Pay Per Identity Action™
Pay per Completed Request
Pay per completed request. Failed attempts are never billed.
| Compared | Manual or Per-Seat IAM | Request Access, Pay Per Identity Action™ |
|---|---|---|
| What you pay for | Every licensed seat, whether it acts or not | Completed requests only |
| Failed attempts | No line between an attempt and a result | Attempts, failures and retries are never billed |
| Many items | One ticket or email per item | One Request Cart, one Submit all |
| Evidence | Ad hoc, hard-to-produce evidence for reviews | A Request ID per line, and Request History with Export |
Pay Per Identity Action™ is in invitation-only preview. Pricing is shared with qualified organizations.
Works with the Systems Request Access Touches
Request Access works across Active Directory, Entra ID, Microsoft 365 and any cloud or business application, with audit, ticketing, logging, SIEM, email, and notifications through the workflow orchestration engine.
- Microsoft 365
- Microsoft
- Active Directory, Entra ID, and Microsoft 365.
- Cloud Apps and Legacy Systems
- Any cloud or business application.
- Audit and Operations
- Audit, ticketing, logging, SIEM, email, and notifications through the workflow orchestration engine.
Avatier MCP
New to Avatier MCP?
The Model Context Protocol is an open standard, stewarded by the Linux Foundation, that lets AI assistants call real systems through connectors instead of custom integrations.
Up and Running in Under a Minute
One URL works in every MCP client. Pick yours, copy, paste, sign in.
Claude
Claude Code
GitHub Copilot
Cursor
Gemini CLI
Frequently Asked Questions
Can I request access for someone else?
Yes. Choose "For another user" instead of "For me" before you fill in the request.
Can I request several items at once?
Yes. Add each item to the Request Cart and choose Submit all. The Results screen shows a Request ID per line.
Does Avatier provide AI-driven compliance reporting?
Yes. Avatier turns continuous identity and access data into audit-ready reports on demand, using AI to assemble who has access to what, what changed, and who approved it, mapped to the controls auditors expect. Instead of a manual evidence scramble before each audit, you generate plain-language, exportable reports covering SOC 2 Type II and ISO 27001, plus the evidence needs associated with NIST, SOX, HIPAA, and GDPR.
What is AI-driven configuration?
Avatier's AI-driven config turns plain-language intent into working policy. Rather than hand-coding rules, connectors, and roles, administrators describe what they need and Avatier recommends and sets up provisioning rules, role mappings, and workflows, then validates them before they go live. It shortens deployment from months to days and keeps configuration consistent, auditable, and free of custom scripting.
What is Pay Per Identity Action™?
Pay Per Identity Action™ is Avatier's pricing mechanic. Customers pay only for completed, verified, policy-compliant identity actions, called Secure Outcomes.
Is it the same as pay-per-action advertising?
No. Pay per action (PPA) is performance-marketing vocabulary for paying when an ad converts. Pay Per Identity Action™ charges for completed identity work.
How do I get started?
Getting started is free, deployment services are included, and a 45-day money-back guarantee applies. Contact Avatier for pricing for your organization.
What is MCP?
The Model Context Protocol is an open standard, stewarded by the Linux Foundation, that lets AI assistants call real systems through connectors instead of custom integrations.
How is it billed?
Pay Per Identity Action™ is in invitation-only preview: each completed, verified action is one Secure Outcome, and attempts, failures and retries are never billed.
Request Access
Every Request, with a Request ID.
Search or browse privileges, request them for yourself or another user, and submit the whole cart at once.