Travelling User Request

Overview

Provide a secure, auditable, and streamlined way to manage temporary overseas access to client devices, enabling clients or technicians to request and approve access while maintaining compliance and minimizing technician involvement.

Three automations cover every path:

• Tech Assist for your technicians
• An administrative SmartForm for client administrators acting on any user
• A self-serve SmartForm where an end user can only request access for their own account

Each provides a structured and auditable way to request temporary travel-related access changes, helping organisations balance security, compliance, and user productivity.

This pack supports both simple access exemptions and advanced location-based scenarios, including country and IP address allow-listing against Conditional Access policies.

Requests can be applied immediately or scheduled with start and end dates, so access begins when the trip does and is removed automatically when it ends.

By standardising travel access requests and automating the policy changes behind them, organisations reduce ticket volume, improve response times, and cut manual administration while maintaining strong security controls.

Flow

Here's the flow:

1. Pia will ask you to select the user requiring travel access.
2. Pia will ask you to choose between:
   • Exclusion Group / Exclusion User List
   • Adding a Country/IP Address Exclusion
3. Pia will ask you to choose one of the following scheduling options:
   • Activate immediately
   • Schedule activation for a future date
   • Schedule activation and automatic removal using start and end dates
4. Based on the selected mode:
   • Exclusion Group / Exclusion User List: Pia adds the user to the configured exemption group associated with the Conditional Access policy. If no exclusion group exists, the user is excluded directly from the base policy.
   • Adding a Country/IP Address Exclusion: Pia allows configuration of approved countries and/or IP addresses, along with start and end dates for each location.
5. If a Country/IP travel policy does not already exist, Pia creates a disabled Conditional Access policy. The policy is automatically activated when the first Country/IP exclusion is created.
6. Any additional Country/IP travel exclusions are created and added to the policy based on their scheduled start times.
7. Pia automatically schedules removal and cleanup actions once the travel period expires.