> For the complete documentation index, see [llms.txt](https://docs.yansalabs.com/okta-orchestrator/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.yansalabs.com/okta-orchestrator/technical-docs/access-provisioning.md).

# Access Provisioning

Access provisioning capabilities are at the heart of **Okta Orchestrator**. We use the concept of [**Access Entities**](/okta-orchestrator/technical-docs/access-provisioning/access-entities.md) to describe a bundle of one or more applications to which a user can request access. The Access Entity record contains information about the access it imparts as well as the behavior of that access.

There are 2 ways in which a user can be granted an [**Access Entity**](/okta-orchestrator/technical-docs/access-provisioning/access-entities.md):

1. Via request through the [**Okta Service Catalog**](/okta-orchestrator/technical-docs/okta-service-catalog.md) items
2. Via [**Access Rules**](/okta-orchestrator/technical-docs/access-provisioning/access-rules.md)

{% hint style="info" %}
You can always check which users have access to which [**Access Entities**](/okta-orchestrator/technical-docs/access-provisioning/access-entities.md) by visiting **Okta Orchestrator -> Access -> Access Entity Assignments** in the left nav.
{% endhint %}