AI Tool Requests
AI tool requests give employees a self-service way to ask for a new AI tool or use case. Approvers review each request with Slack and Jira notifications. On approval, ANTS Platform adds the person to the Okta group that unlocks the tool and marks the tool Sanctioned for them. A cycle-time report shows how long decisions take by risk tier.
How it works
An employee submits a request
The employee opens the request page, directly or from the request link in a Warn mode banner, and fills in the form.
Approvers are notified
ANTS posts the request to the Slack channel and creates an issue in the Jira project you chose.
An approver decides
The approver reviews the request in ANTS Platform and approves or rejects it.
Access is granted
On approval, ANTS adds the requester to the identity provider group mapped to the tool and marks the tool Sanctioned for them.
Each request stores a timestamp for every stage, which feeds the cycle-time report.
Prerequisites
- Discover AI, which requires an Enterprise plan.
- To set up requests and decide on them: write access to Discover AI configuration, which Owner and Department Admin have by default, or a custom role that grants it. See Members & Roles.
- For notifications: the Slack and Jira integrations.
- For the automatic access grant: Okta or Microsoft Entra ID connected through
Directory Integration, with a
credential that can manage group membership:
- Okta: the credential must be allowed to add users to groups
(
okta.groups.manage). - Microsoft Entra ID: the app registration needs a Microsoft Graph
application permission that can add group members, such as
GroupMember.ReadWrite.All, with admin consent.
- Okta: the credential must be allowed to add users to groups
(
Directory credentials cannot be edited after you connect. To give an existing connection permission to manage groups, disconnect it and connect again with the new credential.
Set up requests
Open the settings
Go to Settings > Discover AI > AI tool requests and turn on AI tool requests.
Choose notifications
Pick the Slack channel and the Jira project that receive requests.
Map tools to groups
For each tool you want to grant automatically, choose the Okta or Entra ID group that gives access to it. This mapping tells ANTS which group unlocks which tool.
Share the request page
Copy the request page link. Publish it where employees look for help, and use it as the Request link in Warn mode so the banner sends people straight to the form.
The request form
Anyone who can sign in to your organization can submit a request, including members with the End User role. The requester is recorded from their sign-in.
| Field | What the employee enters |
|---|---|
| Tool or use case | A tool from the registry, or a description of a new tool or use case. |
| Purpose | What they want to use it for. |
| Data types | The kinds of data they plan to use with it. |
Review and decide
Approvers open a request from the Slack message, the Jira issue or the AI tool requests list in Discover AI, then select Approve or Reject.
| Status | Meaning |
|---|---|
| Pending | Submitted and waiting for a decision. |
| Approved | Approved. Access was granted where a group is mapped. |
| Rejected | Rejected. Nothing changes for the requester. |
What happens on approval
- Group membership: if the requested tool is mapped to a group, ANTS adds the requester to that Okta group, or to the Entra ID group through Microsoft Graph. Your identity provider then gives them the tool through that group's app assignments.
- Sanction status: the tool is marked Sanctioned for the approved user or group. Their use of it is reported as sanctioned, and the Warn mode banner no longer shows to them.
- No mapped group: for a use case, or a tool with no mapped group, the decision is recorded and no group changes. Arrange access the way you do today.
Cycle-time report
The Request cycle time report shows the time from submission to decision for each request, by risk tier. The risk tier of a request is the risk level of the requested tool, Low, Medium or High, as set in the registry or by your override. See Sanction status.
Limits
- Every request goes to an approver. Automatic approval for low-risk requests, and parallel review by several groups with service levels, are on the roadmap.
- Risk tiers are the tool's risk level. Configurable risk tiers and intake questionnaires are on the roadmap.
- Time-limited policy exceptions are on the roadmap.