Managerial Approval for RDP Proxy Connections

a privileged user’s rdp connection to target devices can be limited with a managerial approval requirement to enable a managerial approval request via email for users connecting to devices, the approvalrequiredforconnection property must be set as true on the device group with the target devices the managerial approval mechanism for connections is addressed in the approval management section please refer to the section docid\ gxsdrqoxlekuzmrxe3kyb to configure managerial approval for rdp connections navigate to device management > device groups right click the device group and select the show properties option set approvalrequiredforconnection as true when managerial approval for a user is set as true , an approval email is sent to the user’s group manager for each attempt, a new approval email is generated and sent to the manager’s email address a parameter can be configured to limit the amount of emails sent to the manager, for each repeated connection attempt for example, let‘s assume this parameter is set to 300 seconds and a user attempts to connect a device more than one time in five minutes only one email approval request will be sent to the manager if you would like to have only one email to be sent for each connection attempt, the default value of this parameter (”0”) can be used navigate to administration > system config man add the parameter below aioc approval email timeout = 0 (default value is “0” and the value label is in seconds) after the parameters are set, restart netright tomcat by establishing an ssh connection to the single connect server and running the command systemctl restart netright tomcat