This guide explains how to use JIT (Just-in-Time) permission acquisition for Web Apps through QueryPie WAC.

JIT permission acquisition proceeds in the following order.

1. Register a Web App with QueryPie WAC.
2. Register Owners and Members under the Web App.
3. Users request access to the Web App they want to access.
4. The approver registered as Owner approves the user’s Web App access.

Admin-side

1. Register Web App

1. Navigate to Admin > Web Apps > Connection Management > Web Apps menu.
2. Click the Create a Web App button to enter the web app registration page.

Enter the following information.

1. Name : QueryPie Web Site
2. Base URL : querypie.com or 10.10.10.10:443
   1. Base URL cannot include sub-paths (e.g., /ko).
   2. If you enter https:// in Base URL, an error message will be displayed.
   3. If you enter www. in Base URL, an error message will be displayed.
3. Description : Enter a description of the web app. (e.g., QueryPie website)
4. URL Paths : Enter sub-paths. Leave this blank here.
5. Watermark : Choose whether to apply watermark to the user’s browser screen when accessing the web app.
   1. Displays information such as accessor and access time on the browser when accessing the web app to prevent screen leakage.
   2. This guide assumes On status.
6. User Activity Recording : Whether to record user behavior
   1. Turn on all options after enabling On.
   2. Excluded URL Paths is where you enter paths to exclude from user behavior recording. Leave this blank here.
7. Tag : Tag for the web app. Leave this blank here.
8. Click the Save button to save.

2. Register Web App Owner / Member

1. Access the web app detail page
2. Click the “Owner/Member” button in the top right.
3. The drawer window on the right opens, search for the target person and select the left Owner and right Member buttons in the “Assign as” column to assign roles.

3. User’s JIT Web App Access Permission Request

1. After accessing QueryPie, click Web Apps at the top.
2. Click Role on the left and select “Just In Time Role”.
3. Click the server you want to access.
4. Click “Request Access” in the displayed alert to go to Workflow.

1. Access Web App Just-In-Time Access Request.
2. Fill out Step1. If you clicked an item assigned in Web Apps, no separate selection is needed.
   1. Web App : Only items where the user is designated as Member can be selected.
   2. Approvers : Displays Users designated as Owner.
3. Fill out Step2.
   1. Request Title : Enter the request title.
   2. Access Duration (Minutes) : Enter the usage time. It is requested in minutes.
   3. Reason for Request : Enter the reason for the request.
4. Click Submit.

4. Approver’s JIT Web App Access Permission Request Approval

1. A user with approval authority (designated as Web App Owner) accesses Workflow.
2. Go to Received Requests > To Do.
3. Click on the request content to go to the Detail page.
4. Click Approve at the top.

5. Access Web App through QueryPie

1. Go to QueryPie Web Apps.
2. Click Role in the top left and change to Just In Time Role.
3. In the Web App Dashboard’s My Apps, you will see “JIT Active” on the QueryPie Web Site app icon you requested earlier. Click the icon to access the website.
4. When the requested time expires, access permissions are automatically revoked.