Requests

In Cakewalk, requests enable access governance. Users use them to obtain, modify or remove app access and suggest new apps. Approval policies ensure appropriate authorization for changes.

👥 Who It Applies To

Role	Capabilities
Users	Request access, request permission changes, request new apps, cancel/remove requests.
Managers	Approve or deny requests from their team (first step in standard policy). Can also submit requests on behalf of their team.
App Owners	Approve or deny requests for apps they own (final step in standard policy).
Admins	Monitor all requests in logs, reassign tasks, customize policies, override with top-down actions.

---

📖 Key Concepts

• Requests: Foundation of access governance in Cakewalk. They route changes (access, permissions, removals, new apps) through the right approvals before execution.

• Tasks: Every request is broken down into tasks:

  • Review tasks → approvers approve/decline.

  • Action tasks → assignee or Agent Cake executes the change.

• Request Types: Five supported in Cakewalk:

  • Grant access

  • Change permissions

  • Remove access

  • Add new app

  • Archive app

• Policies: Each request follows the policy assigned at global, app, or permission level.

• Reference: See 📩 Requests for details on how requests connect to policies and tasks for full auditability.

💡Why this matters: Requests ensure changes to app access are auditable, governed and aligned with least-privilege principles.

---

🛠 Request Workflows

Grant Access

• Definition: Assigns an app to a user for the first time.

• Slack:

  • Conversationally: Tag @Cakewalk in any channel where it’s been added or DM Cakewalk directly.

    • Example: “I need access to Figma @Cakewalk”

    • Or request for another user as a manager or admin: “@Cakewalk give Figma access to @john”

  • From the interface: Open the Cakewalk app in Slack’s Apps section and request access there.

• Navigation: Go to the App Catalog → Click Get on the desired app and provide justification.

• Why this matters: Enables self-serve access without IT tickets or delays, while ensuring oversight.

---

Change Permissions

• Definition: Modifies the permission level of a user’s existing app access.

• Navigation: Go to My Apps → Select app → Change my permissions. Provide justification.

• Why this matters: Allows users to adapt access when roles change, while keeping permission changes governed.

---

Remove Access

• Definition: Revokes a user’s app access, either voluntarily or triggered by offboarding/review.

• Navigation: Go to My Apps → Select app → Remove my access.

• Why this matters: Lets employees clean up their own access, reducing unused entitlements and risk.

---

Add New App

• Definition: Proposes a new app to be added to the governed catalog.

• Slack: In Cakewalk app, select Request new app.

• Navigation: App Catalog → + New App. Provide justification and additional metadata (team, use case, urgency) if required.

• Why this matters: Expands the official app catalog in a controlled way, reducing shadow IT.

---

Archive App

• Definition: Retires an app no longer needed while keeping historical request logs.

• Navigation: App Governance table → Select an app → Archive app.

• Why this matters: Keeps the catalog current, reduces spend, and prevents stale risk while preserving audit history.

---

Managing Requests

• Users: Track requests under My Requests in Slack or web app.

• Assignees: Complete approvals in Slack or Cakewalk based on policy.

• Admins: Monitor all request logs across the org.

• Cancel a request: Pending requests can be canceled in the Request log before approval.

---

📋 Request Actions at a Glance

Action	Who performs it	What happens	Why it matters
Grant Access	Everyone	Request access to an app. Routed per policy.	Enables self-serve access with proper governance.
Change Permissions	Everyone	Request to change permission level for an app.	Keeps permissions aligned to role needs while governed.
Remove Access	Everyone	Request to revoke own access to an app.	Reduces dormant accounts and enforces least-privilege.
Add New App	Everyone	Request to introduce a new app into the catalog.	Expands catalog securely, reducing shadow IT.
Archive App	Admins, App Owners	Request to retire an app. App is archived; logs retained.	Keeps catalog clean while preserving audit trail.
Track Requests	Everyone	Monitor request progress in Slack or web app.	Ensures visibility and accountability.
Cancel Request	Requester, Admins	Cancel pending requests before approval.	Provides control and prevents unnecessary changes.