Reference Guide
...
Advanced Authorization Methods
Group Manager Authorization via Email
the group manager authorization via email feature can be configured for kron pam proxies and helps to manage authorizations during sessions to enable managerial approval for commands as an authorization policy, the desired policy group needs to have the approval via email action enabled to configure this feature navigate to policy control > session policy open the policy group tab select the policies, choose approval via emai l from the action menu , and click save configure the policy realm for the defined policy group as well this policy is used to get authorization from the group manager whenever a user runs a command configured with the group manager authorization via email feature the group manager approves the request by clicking the link included in the email the http proxy approval email timeout parameter has been added under /u01/http proxy/conf/http proxy properties this property represents the approval request selection timeout, in seconds, from the moment the approval request is produced approval requests are selected either if the current time is between the request start time and end time, or if the timeout does not expire applicable for sc policy connection approval records in 'waiting' or 'first level approved' status any value <= 0 means no timeout the default is 0 example http proxy approval email timeout =0