Abstract: Techniques are provided for controlling access to an application. A first request to use an application may be received from a first user and an application access rule associated with the first user may be accessed. Based on the application access rule, it may be determined that permission is required for the first user to use the application. In response, a second request may be sent to a second user requesting permission for the first user to use the application and a response to the second request may be received from the second user. The response may include authorization information used in determining whether the first user has permission from the second user to use the application. In response to receiving the response from the second user, the first request to use the application initiated by the first user may be handled based on the authorization information.