Approval workflow for enterprise users to request access to unconfigured apps

August 14, 2025

Approval workflow for enterprise users to request access to unconfigured apps

What’s changing
We’re introducing a new approval workflow option for enterprise users to request access to third-party apps that have not been explicitly configured via App Access Control (AAC) by an admin. This only applies to apps which have not been configured. If a user is able to access an app today based on the policies configured by their admin, then there will be no change and they will continue to be able to access the app.

When end users attempt to access unconfigured third-party apps and get blocked, they will see an error screen with an option to raise a review request to admins. After the user submits a request, admins will be able to review the end user requests in app access control and make a decision.

This feature gives enterprise users a clear process for requesting access to apps they need, reducing the likelihood of them being completely blocked and improving their productivity. For admins, it provides a centralized and efficient way to manage and configure access for new applications within their organization, while maintaining control over data security.

Who’s impacted
Admins and end users

Getting started
Admins:

• This feature will be ON by default and can be enabled at the organizational unit (OU) level. You can enable the setting for users to request access to unconfigured apps in the Admin console under API Controls Settings. Visit the Help Center to learn more about user requests for unconfigured apps.
  End users:
• There is no end user setting for this feature. When the approval workflow is enforced, users will see a new screen that allows them to request access to the app from their admin.

Rollout pace
Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on August 14, 2025.

Availability
Available to all Google Workspace customers