Get started with on-call access control

Follow this guide to get started automating access controls for on-call rotations.

Before you begin

To complete this guide, you’ll need:

• C1 Super Administrator role
• A PagerDuty, OpsGenie, or other on-call-enabled application

Estimated time: 15 minutes

Step 1: Integrate your on-call platform

Start by following the docs to integrate your on-call platform with C1:

PagerDuty

OpsGenie

Don’t see your on-call platform? Don’t stress. We’ll build a connector for it. Get in touch and tell us what you need.

Once connected, C1 ingests the users and roles within the platform, and surfaces on-call rotations as resources.

Step 2: Create your on-call access profile

The on-call access profiles should include any apps, roles, permissions, or resources that are requestable by, or automatically granted to, a user who is on-call.

1. Navigate to Access profiles and click New profile.

2. Give the access profile a name, such as “On-call”.

3. Click Continue.

   Now we’ll add the entitlements that are either available for the user to request or automatically granted to the user.

4. Click Entitlements > Manage entitlements.

5. Use filters and the search field to locate the apps and entitlements that should be granted to the user, or available for them to request, when they are on-call.

6. Click Save.

Step 3: Grant the access

You have two options here:

• Make the entitlements in the access profiles requestable by users who are on-call
• Automatically grant the entitlements in the access profiles to users who are on-call

If self-service requestable when on-call:

1. On the Requests page, click Edit.

2. Enable Allow requests.

3. Under Profile is visible to, select Users with entitlements.

4. Select the on-call rotation or rotations that this access profile will be requestable by.

5. Click Save.

If automatically granted when on-call:

1. Go to the access profile’s JML page.

2. Find the Joiner section of the page and click Edit.

3. Use the Approval policy dropdown to select Auto approval.

4. Click Save.

5. Find the Membership automation section of the page and click Edit.

6. Select the on-call rotation or rotations that this access profiles will be automatically assigned to.

7. Click Save.

Automated enrollment with auto-granted access will automatically grant and provision all the entitlements in the access profiles to users who meet the criteria.

Success!

Now whenever a user is on-call, they will either automatically have access to request the on-call access profile’s entitlements or have those entitlements automatically provisioned, depending on the configuration you set up.