DD 2875 — System Authorization Access Request (SAAR)

DD Form 2875, System Authorization Access Request (SAAR), is the standard record the Department of Defense uses to request, justify, and approve an individual's access to a DoD information system or network. It supports the identity and access management controls required under the DoD Chief Information Officer's Risk Management Framework policy (DoDI 8510.01) and related cybersecurity issuances.

A prospective user completes the identifying and justification sections, certifies completion of required information assurance/cybersecurity awareness training, and routes the form to a supervisor and the system's Information System Security Manager (ISSM) or equivalent for approval before an account is provisioned. Because it ties a specific person, a specific system, and a specific access level to a documented chain of approval, the SAAR is the artifact auditors and authorizing officials check first when reviewing who has access to a system and why. It is a near-universal prerequisite across DoD components for CAC-enabled application accounts, network accounts on classified and unclassified enclaves, and accounts within RMF-authorized systems, and it is typically re-executed whenever access requirements, the user's role, or the system itself changes. The current edition is dated May 2022.