Managerial Approval for Connections
The Connection Approval feature is used for setting up and managing user authentications in device connections (in RDP Proxy, SSH Proxy, SFTP Proxy, and HTTP Proxy). Admins can configure an approval process so that users will require managerial approval to connect devices. Connection approvals may be given by managers or members of user groups.
Managerial approval can be configured for either user groups or device groups:
- If managerial approval is configured for a user group, all users in that group will require managerial approval.
- If managerial approval is configured for a device group, all users will require managerial approval to connect to that device group.
To enable managerial approval for a user group:
- Navigate to Users> User Groups.
- Click the Action button and click on the Edit Group.
- Next.
- Navigate to Require Connection Approval.
- Enable the Required Managerial Approval from the Group Manager.
- Save.
To enable managerial approval for a device group:
- Navigate to Devices > Inventory.
- Click the Action button of the preferred Device Group and Edit.
- Next.
- Navigate to the Connection Approval Methods Part.
- Enable Required Managerial Approval and Save.
If you want to set up an approval process to manage connections of a specific group to a specific device group, you should configure an Approval Workflow instead of setting up User Group or Device Group parameters. Refer to the chapter for details.
If the requester is also the manager of the group and auto.approve.when.requester.is.approver is set as true, approval will be given automatically and the connection will be established. Thus, the manager does not need to actively approve.
When you want to approve or reject connections via email, the manager receives an email including the header as this: <instanceName> - Connection Approval Notification - #<approvalID>
My approvals page shows request details and the Approver Manager, which helps me know who will be approving the request.
If the manager does not approve or reject connection requests and approval.status.change.to.expire is defined as min, the request status changes from Waiting to Expired on my Approvals Page.