# Access requests in Caspian

*Updated 4 November 2026 by Simon Mestdagh, founder of Caspian.*

Caspian, the IT automation platform for scale-ups, takes access requests in Slack, Microsoft Teams or Google Chat. Employees ask for an app there. Caspian sends the request to the right approver, makes the change, and logs it.

**Key takeaways**
- Employees ask for an app in Slack, Microsoft Teams or Google Chat; they install nothing new.
- An app set to "On request" for the person's group is granted at once, with no approver.
- Otherwise the app owner, an access granter or IT approves in chat; the requester never approves their own request.
- Caspian makes the change over SCIM, API, browser automation or a task, then reads the app back to confirm.
- Taking requests is free in See; carrying them out is in Act at €10 per active user per month excl. VAT.

| Approver | When |
| --- | --- |
| No one (automatic) | The app is set to "On request" for the person's group |
| App owner or access granter | The app has a named owner or granter |
| IT admin | The app has no owner |


## How does an access request in Slack work?

In Caspian, an access request in Slack, Teams or Google Chat takes 7 steps: the employee asks, Caspian checks the rules for their group, grants at once or routes to the approver, makes the change through SCIM, API, browser automation or a task, reads the app back, and messages the employee.

1. An employee asks in Slack, Teams or Google Chat, for example "I need Figma".
2. Caspian checks the access rules for that person's group.
3. If the app is set to "On request" for that group, Caspian grants it at once.
4. If no rule covers it, Caspian sends the request to the approver.
5. The approver approves or denies in chat.
6. Caspian makes the change through SCIM, API, browser automation or a task, and reads the app back.
7. The employee gets a message when access is ready.

## Who approves an access request?

In Caspian the app owner or access granter approves a request in chat. If the app has no owner, the IT admin approves. If the app is set to "On request" for the person's group, nobody approves: Caspian grants it at once. The approver table is at the top of this page.

The requester can never approve their own request.

## Are access requests logged for audits?

Yes. Caspian logs each request, decision and change: who asked, for what, why, who approved, when, and the result of the read-back check.

## Which chat apps can employees request access from?

Employees can request access in 4 places: Slack, Microsoft Teams, Google Chat and the Caspian web app.

| Channel | Supported |
| --- | --- |
| Slack | Yes |
| Microsoft Teams | Yes |
| Google Chat | Yes |
| Caspian web app | Yes |

## What does Caspian not do with access requests?

Caspian is not an identity provider and does not manage SaaS spend. Sign-in stays with Google Workspace, Microsoft Entra or Okta.

- Caspian is not an identity provider. Sign-in stays with Google Workspace, Microsoft Entra or Okta.
- Caspian does not manage SaaS spend.
- Time-limited access ends with a removal that waits for approval.

## How much do access requests in Caspian cost?

Access requests from Slack, Teams or Google Chat are in See, which is free. Handling requests with your approval is in Act: €10 per active user per month, excluding VAT, free for 30 days from install, no card needed, billed monthly, price locked for the first year. [See pricing](/pricing).

[Start for free](/start). Self-serve, no card needed. Or add Caspian to Slack, Teams or Google Chat.

## What does Caspian read, and with which rights?

Caspian reads metadata and settings, not content. It reads which apps exist, who has an account, which role that account has, and the state of each laptop. It does not read file contents, email bodies or chat messages. Connections are read-only by default; Caspian asks for write rights only for the steps you switch on, such as removing a leaver's account. Customer data is stored with AWS in the EU (Frankfurt). An independent pen test is planned, and ISO 27001 and SOC 2 are in progress.

*Simon Mestdagh, founder of Caspian, wrote this page. We make Caspian, one of the tools discussed here.*

## FAQ

### Do employees need a new app to ask for access?

No. They ask in Slack, Teams or Google Chat.

### Who approves a request?

The app owner or access granter. If the app has no owner, IT approves. Apps set to "On request" are granted at once.

### Is every request logged?

Yes. Each request, decision and change is logged for audits.

### What happens after approval?

Caspian makes the change in the app and reads it back to confirm.

### Is it free?

Taking requests in Slack, Teams or Google Chat is free in See. Having Caspian carry them out is part of Act.

## Related

- [Automate Slack and Google Workspace access](/resources/automate-slack-google-workspace-access)
- [IT automation platform for a small IT team](/resources/it-management-platform-small-it-team)
- [Provisioning in Caspian](/product/provisioning)