Let end users request access when permission is denied

**Is your feature request related to a problem? Please describe.**
I have lots of users and group bindings that determine which users are allowed to use which applications. Managing them is a lot of work and usually very reactive in nature.


A user hits a wall when attempting to access content, and contacts an administrator (often via their department heads).
The administrator then has to go look for the user in the directory and find the appropriate group to add them to.

**Describe the solution you'd like**
Office suites like Microsoft 365 and Google Docs have an access request form built-in on the permission denied page.

**Describe alternatives you've considered**
I've built a request form and API backend to process the access requests. It's not very user-friendly or intuitive.

Having the ability to send a request from inside the permission denied page would make a lot of sense, I think.


**Additional context**
Maybe I'm the only one with this problem, in which case this would require simply too large an effort to implement, I recognize that.

Aside from that there's another conceptual problem: which group should the user be added to if there are multiple group bindings for the application?

Maybe the administrator can be presented with a selection of appropriate groups when they receive the request via email.

> User X wants access to staging.example.org. Adding them to one of
> these groups would give them access:
> - Example App - Staging RO group
> - Example App - Staging RW group
> - Example App - All environments RO group
> - Example App - All environments RW group
> - Example App - Super administrators
> - Authentik Admins

In any case, thank you for reading.
Authentik has made many aspects of my job much simpler and has improved our application security and UX considerably. 🙏