Reference Guide
...
Password Vault Notification Se...
Password Vault Mail List Notif...

Password Retrieval Approval Notifications

An approval requirement mechanism for password retrieval can be established for user groups that have a device group realm defined with the device that contains the account. To set up an approval requirement for a user group:

  1. Navigate to Policy > Portal Functions.
  2. Open the Realm Definition tab.
  3. Click the Add button.
  4. Select the SAPM Approval Requirement Function Group and the User Group (The SAPM Management function group still needs to be included in the realm, to allow the users to see the Vault Management portal)
  5. Click Save.
Portal Functions Realm for a Password Vault Approval Requirement Group
Portal Functions Realm for a Password Vault Approval Requirement Group


When a user requests the Account password and needs administrative approval, a Password Vault Approval Request email is sent to the following users:

  • User groups with the portal function single.connect.sapm.admin or single.connect.sapm.network.admin (or the Password Vault Admin or Password Vault Network Admin function groups)

single.connect.sapm.admin

Grants rights to manage all SAPM accounts and view all logs.

single.connect.sapm.network.admin

Grants rights to manage and view all accounts of the devices defined to the user.

  • User groups with the FULL_CONTROL permission over the SAPM Account that requested the approval.

The approval email sent to the above users contains:

  • Vault Account Name
  • Vault Group Full Path
  • Approval Level
  • Permission information from the email content below.
Vault Approval Request E-mail
Vault Approval Request E-mail