> For the complete documentation index, see [llms.txt](https://docs.securepass.me/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.securepass.me/documentation/admin-user-guide/access-policies-and-approvals/access-control-overview/creating-an-access-control-for-an-application.md).

# Creating an access control for an application

On the **Applications** tab, select **Add Access control**. The **Create Access control** wizard opens with two steps.

{% stepper %}
{% step %}

## Assign users or groups

Use the **Assign** dropdown to choose whether this grant applies to **Users** or **Groups**. Select **Groups** when the access should follow group membership rather than named individuals — anyone added to the group later inherits the access automatically.

Tick the users or groups you want to grant access to, then select **Continue**.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/gpPnVminvy0wgfSJWydy/assets/02.png)
{% endstep %}

{% step %}

## Define access

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/KsTMrGSDMOJ8UP8UK14I/assets/03.png)

| Field              | What to enter                                                                                                      |
| ------------------ | ------------------------------------------------------------------------------------------------------------------ |
| Select Application | The application registered under Manage Resources.                                                                 |
| Select Resources   | The resource within that application the users may reach. More than one may be selected.                           |
| Select Roles       | The role or roles the users hold on that resource. Roles are the ones defined when the application was configured. |
| Access Type        | **Permanent** for standing access, or **Temporary** for access limited by day and time.                            |

Choosing **Temporary** reveals the schedule fields. Tick the days of the week the access should apply on — leave them all clear for every day — then set the **Date** range and the **Time** window. Both are required for temporary access.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/rIO9zIDXAIlnlC5yIJuK/assets/04.png)

Temporary access is the right choice for contractors, vendors, and short project engagements: the grant lapses on its own when the window closes, so no one has to remember to revoke it.

Select **Create Access control**. The new grant appears in the list.

![](https://content.gitbook.com/content/W2srIAMN6RKFwvuEorV5/blobs/TBQFJ64q9vj1Z36XvNxl/assets/05.png)
{% endstep %}
{% endstepper %}