Add Approval Workflow

An approval workflow requires approval of the session before the requestor of the session can log in. You can add up to three Approval Tiers. When the required number of approvals is reached in a Tier, the approvers in the next Tier are notified. Each Tier must approve the request in sequence. See the Approvals Dashboard topic for additional information on how to approve a requested session.

To add an approval workflow to the console.

1. Navigate to the Policy > Access Policies > Connection Profiles page.

2. Select the connection profile to edit

3. Scroll down to the Approval Workflow section, select Tiered and click Save.

   

4. after you create the policy, click the Add Tier icon (green + in a circle) to add an Approval Tier.

   

   Workflow Tiers (only visible when Approval Type is set to Tiered):

   • Delete icon — Deletes the selected Workflow Tier (A confirmation window displays)
   • Edit icon — Modify the escalation settings for the Workflow Tier
   • Escalation — The amount of time available to approve the request before it is escalated
   • Escalation Account — The user that the request is escalated to
   • Escalation Group — The group that the request is escalated to
   • Approvers — The users or groups that can approve a request. See the Approvals Dashboard topic for additional information on how to approve a requested session.
   • Add Approver icon — Add a user or group as an approver
   • Remove Approver icon — Removes the selected approver (A confirmation window displays)
   • Approvals Required — The number of approvers required to approve the request

5. Click the Edit icon to open the Tier Escalation window.

   

6. In the Tier Escalation window, enter the following information:

   • Escalation in Minutes — The amount of time available to approve the request before it is escalated (default is 10 minutes)
   • Escalation Account — The user that the request is escalated to
   • Escalation Group — The group that the request is escalated to

7. Click Okay to save the escalation settings.

   

8. Click the Add Approvers icon to open the Add Users and Groups as Approvers window.

   

   The Add Users and Groups as Approvers window has the following features:

   • Search — Searches the table or list for matches to the search string. When matches are found, the table or list is filtered to the matching results.
   • Radio buttons to filter by users or groups
   • Available Users/Groups — Shows all users and groups added to the console
   • Users & Groups to Add — Shows the users and groups to be added to the Workflow Tier as Approvers
   • Column headers can be sorted in ascending or descending order:
     • Type — User or group
     • Name — Name of the user or group
     • User Name — User or group SAM Account Name
     • Email — User or group email address

9. Filter by Users or Groups, or use the Search feature.

10. To add a user or group to the Approval Tier as an Approver, click a row in the Available Users/Groups table and it is immediately moved to the Users & Groups to Add table.

    note

    It is usually desirable to add more approvers than required to approve the request, to ensure that approval is granted before the escalation timeout is reached.

11. (Optional) Click a row in the Users & Groups to Add table to move it back to the Available Users/Groups table.

12. Click Add to add the Approvers to the Approval Tier.

    

13. Set the Approvals Required:

    • Click the More or Less icons to change the number of approvers required to approve the request.

    Workflow Tier settings (only visible when Approval Type is set to Tiered):

    • Delete icon — Deletes the selected Workflow Tier (A confirmation window displays)
    • Edit icon — Modify the escalation settings for the Workflow Tier
    • Escalation — The amount of time available to approve the request before it is escalated
    • Escalation Account — The user that the request is escalated to
    • Escalation Group — The group that the request is escalated to
    • Approvers — The users or groups that can approve a request.
    • Add Approver icon — Add a user or group as an Approver.
    • Remove Approver icon — Removes the selected Approver (A confirmation window displays)
    • Approvals Required — The number of Approvers required to approve the request
    tip

    Remember, there must be enough Approvers in the list to meet the number of Approvals Required, though it is usually desirable to have more than the minimum.

14. To add an additional Approval Tier, click the Add Tier icon and repeat from Step 4.

    • You can add up to three Approval Tiers. When the required number of approvals is reached in a Tier, the Approvers in the next Tier are notified. Each Tier must approve the request in sequence.
    note

    Connection profile approvals allow the same user that initiated the request to approve the session as well.

The new Approval Workflow is added to the Connection Profile. See the Approvals Dashboard topic for additional information on how to approve a requested session.