Approve privileged access requests

If you belong to an approver group of an access profile, you receive your colleagues' privileged access requests to decide. You never decide your own requests.

Where do I see the requests?

• In the console: «Access» › «Approvals». When there is nothing: «No request is waiting for your decision.»
• On your phone: the approver app receives the request, titled "Access" followed by the account and the target.

How do I decide in the console?

1. Open the «Access request». Check the requester, the account, the target and its tier, the kind of access, the duration, the justification and the ticket reference.
2. «Compare this code with the one the requester sees before you decide.» Check with the requester through a channel of your own (for example the call you are on).
3. Choose «Approve with passkey» or «Deny with passkey» and confirm with your passkey.
4. The console shows that the decision was recorded and the request's new state.

When the profile requires several approvals, the progress appears, for example «1 of 2 approvals so far.»

How do I decide on my phone?

The phone shows «Requested by», «Target», «Account», «Access type», «Duration», «Justification» and «Ticket reference», and the comparison code. Compare the code with the requester and choose «Approve» or «Decline». A critical target is marked critical.

When to deny

• The justification matches no work you know about.
• The duration is longer than the work needs.
• The target is critical and there was no prior notice.

Messages

A message saying the passkey confirmation was not accepted for this request means the confirmation expired or does not match this request. Make the decision again.