Question 1

What is self-service access?

Accepted Answer

Self-service access lets people and agents find and request approved applications, MCP servers, AI tools, roles, and permissions without opening a helpdesk ticket.

Question 2

How is self-service access different from a traditional IT ticket?

Accepted Answer

A traditional ticket depends on manual triage, routing, and provisioning. A governed self-service request includes the identity, resource, access level, duration, and policy context needed to route or fulfill it consistently.

Question 3

What is a self-service application catalog?

Accepted Answer

A self-service application catalog is a searchable list of resources an organization has approved for request. C1 can publish apps, MCP servers, AI tools, roles, and permissions while hiding resources that have not passed administrator review.

Question 4

Where can people and agents request access?

Accepted Answer

Requests can start from supported C1 experiences including the web, Slack, Microsoft Teams, MCP, API, and CLI, so access can be requested where work already happens.

Question 5

How does C1 keep self-service access governed?

Accepted Answer

C1 evaluates identity, role, resource, risk, requested scope, duration, and policy before access is provisioned. Routine requests can be auto-approved while sensitive access goes to a responsible approver.

Question 6

Can access requests be approved automatically?

Accepted Answer

Yes. Policy can automatically approve low-risk, eligible requests and route exceptions or sensitive permissions for human review. Auto-approval should be limited to conditions the organization has explicitly defined.

Question 7

Does self-service access support just-in-time expiration?

Accepted Answer

Yes. Policies can issue time-bound access and remove it when the approved period or work ends, reducing the chance that temporary permissions become standing access.

Question 8

Can MCP servers and AI tools use the same access policies as applications?

Accepted Answer

Yes. Approved MCP servers, toolsets, AI tools, and applications can use the same identity-aware request, approval, expiration, and audit model when connected through supported C1 paths.

Question 9

How can a self-service catalog reduce shadow IT and shadow AI?

Accepted Answer

A fast catalog gives employees and agents an approved path to the tools they need. It does not replace discovery controls, but it can reduce the incentive to adopt unsanctioned applications or AI tools outside governance.

Question 10

Does self-service access replace an identity provider or service desk?

Accepted Answer

No. C1 works with supported identity providers, directories, applications, and collaboration tools to govern the request and fulfillment process. Existing systems can remain the source of authentication, identity data, or operational support.

Question 11

What audit evidence does a self-service access request create?

Accepted Answer

C1 can retain the requester, target resource, requested scope and duration, policy result, approver decision, provisioning action, and final status for supported systems.

Apps & AI Self Service

How do we give our workforce the apps, MCPs, and AI tools they need, on-demand, and without manual work?

Give your workforce on-demand access to approved apps, MCPs, and AI tools.

Publish one approved catalog

Request access where work happens

Apply policy before provisioning

Make MCPs and AI tools self-service

Remove access when work ends

The C1.ai products you'll use:

Give people and agents governed access without a helpdesk ticket.

FAQs