Request types
Different requests route through Approvals, and the review experience varies by type. For some types the reviewer can adjust the request before approving; others are review-only (approve or reject as-is).
Work session
A request for a new work session. The reviewer sees the requested duration, features, target servers, and the requester’s justification.
Adjustable before approving. In the Admin adjustments area, the reviewer can:
- Change the requested features — add or remove features (scopes) before granting.
- Change the target servers — add or remove servers.
- Shorten the window — grant a shorter duration or an earlier end time than requested, never longer. See Shortening the session window before approving.
- Add recommendations — notes the assignee sees before starting the session.
Work sessions also include an AI pre-review and may show an urgency warning when the session window is about to expire. Approving sends along any adjustments you made.
Work session modification
A request to change an existing session’s servers or features. The reviewer sees the before/after changes and approves or rejects them. Review-only.
Session extension
A request to extend an existing session’s end time, labeled Session extension in the queue—distinct from a work session modification. The reviewer sees the requester’s reason, the session’s current end time, the requested new end time, and the extension length.
Adjustable before approving. The reviewer can leave the requested end time as-is, or shorten it—never set it later than what was requested. The chosen time is checked against the workspace’s maximum session duration at the moment of approval. Rejecting leaves the session’s end time unchanged.
See Extending with approval for the requester’s side.
Service token
A request to issue a service token for an application. The reviewer sees the requested scopes, the risk level with a per-scope breakdown, and the reason. Review-only (approve or reject).
Token modification
A request to change a service token (for example, enabling it or changing scopes). The reviewer sees the changes. Review-only.
Username
A request to set a username that requires approval. The reviewer sees the requested identity. Review-only.
Group name
A request to set a group name that requires approval. The reviewer sees the requested name. Review-only.
Summary
| Type | Reviewer can adjust? | Has AI pre-review |
|---|---|---|
| Work session | Yes — features, servers, window, recommendations | Yes |
| Work session modification | No | No |
| Session extension | Yes — a shorter end time (never longer) | No |
| Service token | No | No (risk from scopes) |
| Token modification | No | No |
| Username | No | No |
| Group name | No | No |