Managerial Approval Reservation
For devices that require managerial approval for RDP/SSH/SFTP/HTTP with proxy connections, users can make reservations for future dates in order to get their approvals before the planned activity. To make a reservation for a single device, follow the steps below:
- Navigate to Policy Control > Approval Management > Connection Reservation.
- Select Single Device as the Reservation Type. Host, Connection Username and Selected Devices fields will appear.
- Start typing the host info in the Host field and select the device that appears in the search results.
- Select a connection username if the reservation is specific to a connection username.
- Click the plus + button.
- To add more devices to the reservation, repeat the steps 3 to5.
- Select Time Start and Time End and click Save.
You can also add a Device Group to your device selection. To add a Device Group, follow the steps below:
- Navigate to Policy Control > Approval Management > Connection Reservation.
- Select Device Group as the Reservation Type. Device Group, Connection Type, Connection Username and Selected Devices fields will appear.
- Start typing the Device Group name in the Device Group field and select the Device Group that appears in the search results.
- If the devices under the Device Group have more than one connection protocol, you can select a specific protocol under the Connection Type field, or you can select all connection types.
- Select a connection username if the reservation is specific to a connection username.
- Click the plus + button.
- To add more device groups to the reservation, repeat steps 3 to 6.
- Select Time Start and Time End and click Save.
Instead of a Device, a Remote Application can also be added on the connection Reservation. To add a Remote Application, follow the steps below:
- Navigate to Policy Control > Approval Management > Connection Reservation.
- Select Remote Application as the Reservation Type. Remote App Name, RDP Server, Remote App User and Connection Username fields will appear.
- Select the name of the remote application from the Remote App Name combo box.
- The RDP servers that are available in the device groups for which the selected remote app is enabled will appear in the RDP Server combo box. Select one of them, or all of them to specify in which server the Remote App connection is to be established.
- The usernames defined in the Remote Application auto login process will appear in the Remote App User combo box. Select one of them, or all of them to specify which remote app user will be used during auto login.
- The usernames enabled for the RDP connection towards the RDP server will appear in the Connection Username combo box. Select one of them, or all of them to specify which username will be used for RDP connection.
- Click the plus + button.
- To add more remote applications to the reservation, repeat steps 3 to 7.
- Select Time Start and Time End and click Save.
A connection reservation can include Single Devices, Device Groups and Remote Applications in the same approval.
Group managers can make reservations on behalf of the members of their groups. To enable this ability, the Reservation on Behalf of Group Member function group must be added to the Portal Functions of the User Group. After adding the function group, a field called For User appears in the Connection Reservation screen when the group managers log in.
After completing these steps, the reservation record will appear in the Search Results section, and the manager responsible for approvals will receive the approval request email. Both the search results and the email include an Approval ID number. This number can be used when searching for reservations in Approval Management, Connection Management, and Logging screens. If the manager approves, the user can connect to the device(s) with the connection username during the specified reservation times.