# How-to Guides

- [Users & Groups](https://docs.getcakewalk.io/how-to-guides/users-and-groups.md): Manage all your users in Cakewalk. Learn how to import and sync users, set up groups for role-based access control and automate Joiner–Mover–Leaver (JML) workflows to keep access up to date.
- [User Management](https://docs.getcakewalk.io/how-to-guides/users-and-groups/user-management.md): In Cakewalk’s User Management, Admins and Managers can oversee users and access, with integrated metadata, roles, categories, app access, and group membership for an identity-aware directory.
- [Groups & Role-Based Access Control (RBAC)](https://docs.getcakewalk.io/how-to-guides/users-and-groups/groups-and-role-based-access-control-rbac.md): Groups and RBAC are the basis of access management in Cakewalk. Groups define membership, while RBAC specifies the access granted, enabling scalable access control without managing individual users.
- [Joiner Mover Leaver (JML)](https://docs.getcakewalk.io/how-to-guides/users-and-groups/joiner-mover-leaver-jml.md): Automate user lifecycle management in Cakewalk. Learn how Joiner–Mover–Leaver (JML) workflows handle onboarding, role changes and offboarding to keep access aligned and least-privilege enforced.
- [Apps](https://docs.getcakewalk.io/how-to-guides/apps.md): Discover and govern all apps used across your organization. Learn how Cakewalk uncovers shadow IT, enriches apps with metadata and applies governance workflows such as permissions, and provisioning.
- [App Discovery](https://docs.getcakewalk.io/how-to-guides/apps/app-discovery.md): App Discovery in Cakewalk identifies all apps used in your organization. Using browser extension data and integration with Google Workspace and Entra, it shows every app, its users and last usage.
- [App Governance](https://docs.getcakewalk.io/how-to-guides/apps/app-governance.md): App Governance allows Admins and App Owners to manage all apps in one place. Control statuses, owners, provisioning, permissions, policies, and life-cycle actions for both managed and unmanaged apps.
- [Policies](https://docs.getcakewalk.io/how-to-guides/policies.md): Policies in Cakewalk dictate routing of access requests and tasks. They specify approvers, sequence, and conditions. Clear policies ensure consistent, compliant, and auditable access governance.
- [Requests](https://docs.getcakewalk.io/how-to-guides/requests.md): In Cakewalk, requests enable access governance. Users use them to obtain, modify or remove app access and suggest new apps. Approval policies ensure appropriate authorization for changes.
- [Tasks](https://docs.getcakewalk.io/how-to-guides/tasks.md): In Cakewalk, Tasks represent the actions users need to take to complete requests. Tasks are automatically created when requests require input from an approver.
- [Notification Preferences](https://docs.getcakewalk.io/how-to-guides/notification-preferences.md): Control which notifications you receive and through which channel. Customize email and Slack preferences by category.
- [Access Reviews](https://docs.getcakewalk.io/how-to-guides/access-reviews.md): Use Cakewalk's Access Reviews to streamline access checks for apps. Replace spreadsheets with structured campaigns, dashboards, and audit trails.
- [Auto Provisioning](https://docs.getcakewalk.io/how-to-guides/auto-provisioning.md): Automate account creation and removal across your apps. Learn how Cakewalk provisions users in real time, keeps logs for full auditability and integrates with your app stack.
- [Introduction](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/introduction.md): Learn how Auto Provisioning in Cakewalk saves time, reduces errors, and ensures the right people have the right access.
- [Introduction to Auto Provisioning](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/introduction/introduction-to-auto-provisioning.md): Auto-provisioning eliminates manual steps in granting user’s access to software, ensuring they get the tools they need from day one.
- [Auto-Provisioning Methods](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/introduction/auto-provisioning-methods.md): Cakewalk offers two flexible methods for auto-provisioning, ensuring access is granted automatically, no matter your setup.
- [Prerequisites for Auto-Provisioning](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/introduction/prerequisites-for-auto-provisioning.md): Before you can enable auto-provisioning, make sure your setup meets the requirements based on your chosen provisioning method.
- [Key Benefits of Agent Cake](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/introduction/key-benefits-of-agent-cake.md): Agent Cake gives you full provisioning coverage—even for tools without SCIM or public APIs—while streamlining IT workflows and enforcing access governance.
- [How It Works](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works.md): Learn how Agent Cake provisions access end-to-end. With full control over settings, permissions and security safeguards.
- [Activate Agent Cake](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/activate-agent-cake.md): Agent Cake must be activated per app to enable auto-provisioning.
- [Configuration Settings](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/configuration-settings.md)
- [Control Provisioned Permissions](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/control-provisioned-permissions.md): Agent Cake allows fine-grained control over which permissions are provisioned automatically for each connected app.
- [Set up Service Accounts](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/set-up-service-accounts.md): Service accounts are recommended to ensure reliable, auditable provisioning activity—separate from individual user behavior.
- [Multi-Factor Authentication](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/multi-factor-authentication.md): Agent Cake supports Time-based One-Time Password-based MFA (TOTP) and can provision access even in apps where MFA is enforced.
- [Email Verification](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/email-verification.md): Some apps require email verification (e.g. magic links or codes) during provisioning. By connecting a Gmail or Outlook inbox, Agent Cake can automatically complete these flows when provisioning users.
- [Security & Data Protection](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/security-and-data-protection.md): Cakewalk protects your credentials using client-side encryption, isolated execution environments and in-memory decryption—ensuring they’re never exposed at rest or in transit.
- [IdP-Based Auto-Provisioning](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/how-it-works/idp-based-auto-provisioning.md): Connect your existing IdP workflows to Cakewalk to automatically reflect user provisioning and deprovisioning in Cakewalk.
- [Monitoring & Logs](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/monitoring-and-logs.md): Track every provisioning step with detailed execution logs and clear error handling to keep workflows reliable and auditable.
- [Execution Logs](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/monitoring-and-logs/execution-logs.md): Track the success and failure of auto-provisioning runs to stay in control.
- [Error Handling](https://docs.getcakewalk.io/how-to-guides/auto-provisioning/monitoring-and-logs/error-handling.md): If Agent Cake can’t complete a task, Cakewalk automatically falls back to task-based provisioning so access requests never get stuck.
- [Access Sync](https://docs.getcakewalk.io/how-to-guides/access-sync.md): With Access Sync you can pull access data straight from your apps into Cakewalk, in real time. One source of truth. No manual reconciliation. No repetitive work.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.getcakewalk.io/how-to-guides.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
