---
title: Managerial Approval for SFTP Devices Connections
slug: singleconnect-reference-guide-3-1-0/managerial-approval-for-sftp-devices-connections
description: Learn how to enable managerial approval for user connections to devices via email or mobile notification. Set the "approvalRequiredForConnection" property to true on the target device group to receive approval request emails for every connection attempt. 
docTags: 
createdAt: 2022-08-01T18:10:53.000Z
---

To enable managerial approval via email or mobile notification for users connecting to devices, the **approvalRequiredForConnection** property must be set as **true **on the device group that has the target devices.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/9PaUPdrqeE58u-svILus5_image.png" size="80" width="766" height="344" caption="Approval Required Property" position="center" showCaption="true"}



When the managerial approval property for user is set as** true**, an approval request email is sent to the group manager of the user who attempted to establish the connection. For each attempt, a new approval request email is generated and sent to the manager’s email address. 


A parameter can be configured to set a time limit on sending emails for the same connection request:

1. Establish an SSH connect to the Single Connect server.
2. Set the required parameter in **/u01/sftp\_prox/conf/nsso.properties** with the commands:
   cd /u01/sftp\_prox/conf/
   vi nsso.properties
   Add/edit the following parameter with vi editor:
   **nsso.approval.email.timeout = 0** (default value is “0” and the label of the value is seconds.)
3. After the parameters are set, save, and exit the vi editor, and restart sftp\_prox with the command:
   systemctl restart pam-sftp

The parameter prevents Single Connect from sending too many emails to the manager for each repetitive attempt. For example, if this parameter is set to 300 seconds, and a user attempts to connect to a device more than one times in five minutes, only one connection approval request email is sent to the manager. To receive a connection approval request email for each attempt separately, the parameter’s default value of zero can be used.