> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gosentrix.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Break-Glass Access

> Emergency access procedures

Break-glass access provides emergency administrative access when normal authentication methods are unavailable.

## When to Use

Break-glass access should only be used in emergency situations:

* Account lockout preventing critical operations
* MFA device loss with no recovery codes
* SSO provider outage
* Security incident requiring immediate access

## How It Works

1. **Initiate Break-Glass**

<RequestExample>
  ```bash theme={null}
  curl -X POST https://cp.gosentrix.io/api/v1/tenants/{id}/break-glass/initiate \
    -H "Authorization: Bearer YOUR_ACCESS_TOKEN" \
    -d '{
      "reason": "SSO provider outage preventing access",
      "duration_minutes": 60
    }'
  ```
</RequestExample>

2. **Approval Required**

Break-glass requests require approval from designated approvers.

3. **Temporary Access**

Once approved, temporary elevated access is granted.

## Security Controls

* All break-glass sessions are logged
* Time-limited access (default: 1 hour)
* Requires explicit reason
* Audit trail maintained
* Alerts sent to security team

## Best Practices

* Use only in true emergencies
* Document reason clearly
* Revoke immediately after use
* Review break-glass logs regularly

<Warning>
  Break-glass access bypasses normal security controls. Use with extreme caution.
</Warning>
