Request and approve access to Postman resources

This topic provides an overview of managing access to Postman workspaces, the elements they contain, and team membership when links to resources are shared outside the team. It covers requesting access and managing permissions within team workspaces. Using this guide, both users and workspace administrators can control access to workspaces for secure collaboration across teams.

Request Editor access

To edit a workspace or its elements, users can request Editor access from a team member with Admin access for the workspace or Editor access for an element. To learn more about the roles and types of access, see Define roles and permissions within a Postman team. You can also learn more about viewing a collection as a guest user.

Roles and permissions depend on your Postman plan.

Request Editor access to a workspace

To request Editor access to a workspace, do the following:

1. Open the workspace overview, then select Request to Edit in the upper-right corner. You can also request access when you try to create an element in the workspace by selecting Create new in the left sidebar.

2. (Optional) Add a note to the Workspace Admins.

3. Select Request Access.

   

Workspace Admins receive an in-app and email notification detailing your request. When it's approved or denied, you're notified in-app and by email of their response.

Request access to a private workspace

Private workspaces are available on Postman Professional and Enterprise plans.

A private workspace is a workspace that's only visible to the user who created it and team members who've been invited to join it. Private workspaces enable teams to restrict access to elements that are relevant only to a particular group.

To collaborate in a private workspace, a workspace Editor or Admin must invite you. You can also request access to a workspace and get approved. If you're using the Postman web app, you can navigate to a link a teammate has shared to a private workspace or an element within one. There, you'll have the option to request access to the workspace.

You can add a note and select Request Access to submit the request. All Workspace Admins will receive a notification to review your request, and you'll be alerted in Notifications and by email when your request is approved or denied.

If your request isn't reviewed within 15 days, it will expire, and you'll be notified in Postman and by email to resubmit your request for access.

Request Editor access to an element

If you can view an element in a workspace but can't edit it, the Read only icon appears next to the element's name.

To request Editor access to an element, do the following:

1. Select Collections, APIs, Environments, Mock Servers, or Monitors in the sidebar.

2. Select View more actions next to the element name and select Manage roles.

   

3. Select Request Access.

   

4. Select the person you want to send the request to, select the Editor role, then select Send Request.

   

Postman sends an in-app and email notification to the person you selected. Once they approve your request, you also get notified in-app and by email. Your request will expire after 30 days, after which you can request access again.

Request Editor access to a collection as a guest user

You can request Editor access to a collection if you're a guest user who is allowed to view the collection. When you get Editor access to a collection, your team role also changes from the Guest role to the Developer role. This team role change adds you to the team and gives you access to all team resources and workspaces.

1. Select Collections in the sidebar.
2. Select the collection.
3. Select Request to Edit.

Your team must have available seats or Auto-Flex enabled to give a guest user Editor access to a collection.

Postman sends in-app and email notifications to team members with Editor access to the collection.

Approve requests for access

If you're a workspace Admin or an Editor of an element, you receive access requests.

Approve Editor access

When a teammate requests Editor access for an API, collection, environment, mock server, or monitor, you'll receive an in-app and email notification that details the request. Select Approve Request if you want to give your teammate Editor access to the collection, API, environment, mock server, or monitor. If you don't want to give Editor access, you can ignore the request. The request will expire after 30 days.

When a teammate requests Editor access for a workspace, you'll receive an in-app and email notification detailing the request. Select Respond to Request to open the workspace settings. You can select the role you'd like to give the user, then Approve or Deny the request.

Approve requests for access to private workspaces

Private workspaces are available on Postman Professional and Enterprise plans.

Team members can request access to a private workspace if another user with access provides them with a link to it. All workspace Admins are notified of requests for access in Notifications and by email. Select Respond to Request to review requests for access.

You can assign a workspace role to define a user's permissions within the workspace, then select Approve to grant them access. You can also choose to reject a request for access by selecting Deny. Team members who have requested access are notified of your decision in Postman and by email.

Requests for access to private workspaces expire if they aren't reviewed within 15 days. If this occurs, Postman alerts the affected users to resubmit their request for access.

Manage team access through shared resources

Users can share collections and other elements with their team and users who aren't part of their team. By default, when users share a link with someone who isn't part of their team, they'll be prompted to request to join the team. If enabled in the team settings, users on Free, Basic, and Professional plans from verified domains can automatically join a team using a link to a resource that a team member shared with them.

Upon approval, the new team member is assigned a Developer role. For more information about sharing resources using links and other methods, go to Share your work in Postman.

As an Admin, you can select to manually or automatically approve each request to join a team through a shared resource.

Your team must have available seats or Auto-Flex enabled to invite more team members. If your team has SSO enabled, users who aren't part of your team will be required to sign in using your team's SSO.

To access team settings, select Team in the header and then select Team Settings.

To update your team access settings, select Team access from the sidebar.

If you select auto-approve, you’re prompted to save the change.

You can invite collaborators, remove existing team members, and update user roles at any time in your team dashboard. For more information, see Manage team members.

You can also enable team discovery in Team access settings. For more information, go to Configure team settings.