Managerial Approval Reservation
For devices that require managerial approval for RDP/SSH/SFTP/HTTP with proxy connections, users can make reservations for future dates to get their approvals before the planned activity. To make a reservation for a single device, follow the steps below:
- Navigate to Devices > Inventory > Reservation tab.
- Select Target Type as Single Device by clicking the plus + button.
- Start typing the host info in the Host field and select the device that appears in the search results.
- Select a connection username if the reservation is specific to a connection username then click on the add button.
- Optionally type a description in the reason field.
- To add more devices to the reservation, repeat steps 3 to 5.
- With the Next button Select Time Start and Time End and click Add Reservation.
You can also add a Device Group to your device selection. To add a Device Group, follow the steps below:
- Navigate to Devices> Inventory> Reservation tab.
- Select Target Type as Device Group by clicking the plus + button
- Start typing the host info in the Host field and select the device that appears in the search results.
- Select a connection username if the reservation is specific to a connection username then click on the Add button.
- Optionally type a description in the reason field.
- To add more device groups to the reservation, repeat steps 3 to 5.
- With the Next button Select Time Start and Time End and click Add. Reservation.
Instead of a Device, a Remote Application can also be added to the connection Reservation. To add a Remote Application, follow the steps below:
- Navigate to Devices > Inventory> Reservation tab.
- Select Remote Application as the Reservation Type by clicking the plus + button Remote App Name, RDP Server, Remote App User, and Connection Username fields will appear.
- Select the name of the remote application from the Remote App Name combo box.
- The RDP servers that are available in the device groups for which the selected remote app is enabled will appear in the RDP Server combo box.
- Select one of them, or all of them to specify on which server the Remote App connection is to be established.
- The usernames defined in the Remote Application auto-login process will appear in the Remote App User combo box.
- Select one of them, or all of them to specify which remote app user will be used during auto login.
- The usernames enabled for the RDP connection to the RDP server will appear in the Connection Username combo box.
- Select one of them, or all of them to specify which username will be used for the RDP connection.
- Optionally type a description in the reason field.
- To add more remote applications to the reservation, repeat steps 3 to 7.
- With the Next button, select Time Start and Time End and click Add Reservation.
A connection reservation can include Single Devices, Device Groups, and Remote Applications in the same approval.
Group managers can make reservations on behalf of the members of their groups. To enable this ability, the Reservation on Behalf of Group Member function group must be added to the Portal Functions of the User Group. After adding the function group, a field calledĀ For UserĀ appears in theĀ Connection ReservationĀ tab when the group managers log in.
After completing these steps, the reservation record will appear in the My Approvals section, and the manager responsible for approvals will receive the approval request email. Both the search results and the email include an Approval ID number. This number can be used when searching for reservations in My Approvals, Connection Management, and Logging screens. If the manager approves, the user can connect to the device(s) with the connection username during the specified reservation times. If the manager does not approve or reject during the reservation time, expired requests are indicated on the My Approvals page by showing an Expire status for connection reservation requests.
When you want to start the connection reservation process via email, the manager receives an email that includes this header:
<instanceName> - Connection Reservation Approval Notification - #<approvalID>
If you want to enable Expiry Notification of connection reservations, the aioc.connection.reservation.expiration.alert.before.values parameter should be saved as day on the System Config Manager. Thanks to this parameter, users can submit reservation requests again to extend the connection time.
If allow.changing.reservation.time.by.approver system parameter set as true, the approver will be able to change the reservation time (start time or end time) during approval and notify the requester of the time duration change.
ļ»æ