Chapter 3. Approved access


With Red Hat Site Reliability Engineering (SRE), you typically do not need elevated access to systems to do normal operations to manage and support your Red Hat OpenShift Service on AWS clusters. If you have elevated access, you can give SRE the access levels of a cluster-admin role.

In the unlikely event that SRE needs elevated access to systems, use the Approved Access interface to review and approve or deny access to these systems. SRE can create elevated access requests to Red Hat OpenShift Service on AWS clusters and the corresponding cloud accounts in response to a customer-initiated support ticket or to alerts as part of the standard incident response process.

When you enable Approved Access and an SRE creates an access request, cluster owners receive an email notification informing them of a new access request. The email notification has a link allowing the cluster owner to approve or deny the access request. If you do not respond to this request, there is a risk to your service-level agreement (SLA) for Red Hat OpenShift Service on AWS.

Note

Denying an access request requires you to complete the Justification field. In this case, SRE cannot directly act on the resources related to the incident. Customers can still use the Red Hat Customer Support resource to help investigate and resolve any issues.

Red Hat OpenShift Service on AWS Approved Access is not enabled by default. To enable Approved Access for your Red Hat OpenShift Service on AWS clusters, you should create a support ticket.

Procedure

  1. Log in to the Customer Support page of the Red Hat Customer Portal.
  2. Click Get support.
  3. On the Cases tab of the Customer support page:

    1. Optional: Change the pre-filled account and owner details if needed.
    2. Select the Configuration category and click Continue.
  4. Enter the following information:

    1. In the Product field, select Red Hat OpenShift Service on AWS Hosted control planes.
    2. In the Problem statement field, enter Enable ROSA Access Protection.
    3. Click See more options.
  5. Select OpenShift Cluster ID from the drop-down list.
  6. Fill the remaining mandatory fields in the form:

    1. What are you experiencing? What are you expecting to happen?

      1. Fill with Approved Access.
    2. Define the value or impact to you or the business.

      1. Fill with Approved Access.
    3. Click Continue.
  7. Select Severity as 4(Low) and click Continue.
  8. Preview the case details and click Submit.

Cluster owners receive an email notification when Red Hat Site Reliability Engineering (SRE) request access to their cluster with a link to review the request in the Hybrid Cloud Console.

Procedure

  1. Click the link within the email to bring you to the Hybrid Cloud Console.
  2. In the Access Request Details dialog, click Approve or Deny under Decision.

    Note

    Denying an access request requires you to complete the Justification field. In this case, SRE cannot directly act on the resources related to the incident. Customers can still use the Customer Support to help investigate and resolve any issues.

  3. Click Save.

Review access requests for your Red Hat OpenShift Service on AWS clusters from the Hybrid Cloud Console.

Procedure

  1. Navigate to OpenShift Cluster Manager and select Cluster List.
  2. Click the cluster name to review the Access Request.
  3. Select the Access Requests tab to list all states.
  4. Select Open under Actions for the Pending state.
  5. In the Access Request Details dialog, click Approve or Deny under Decision.

    Note

    Denying an access request requires you to complete the Justification field. In this case, Site Reliability Engineering (SRE) cannot directly act on the resources related to the incident. Customers can still use the Customer Support to help investigate and resolve any issues.

  6. Click Save.
Red Hat logoGithubredditYoutubeTwitter

Learn

Try, buy, & sell

Communities

About Red Hat Documentation

We help Red Hat users innovate and achieve their goals with our products and services with content they can trust. Explore our recent updates.

Making open source more inclusive

Red Hat is committed to replacing problematic language in our code, documentation, and web properties. For more details, see the Red Hat Blog.

About Red Hat

We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Theme

© 2026 Red Hat
Back to top