Enabling Request and Approval Workflow

You can enable a “request and approval” workflow for specific accounts stored in the Privileged Access Service. Users who don’t have access by default can then submit requests to a designated approver who has the authority to grant or deny them access. By enabling a workflow, users can request access to the privileged accounts you specify and, if their request is approved, check out the account password or use the account to log on remotely.

You can also explicitly prevent an account from being available for access requests. For example, you might configure a “request and approval” workflow for all accounts, then identify a few accounts which do not allow access requests.

To enable workflow for a specific account:

  1. In the Admin Portal, click Resources, then click Accounts to display the list of accounts.
  2. Click Local Accounts, Domain Accounts, or Database Accounts to select the type of account you want to modify.
  3. From the list of local, domain, or database accounts, select the specific account for which you want to enable workflow.
  4. From the account details, click Workflow.
  5. Select Yes.
  6. Search for and select an appropriate user, group, or role to approve requests, then click Add.
  7. Click Save.

For more information about configuring a “request and approval” workflow, requesting access, and approving requests, see Request and Approval Workflow Overview.