User Setup
After the bot is deployed, register a Slack channel to receive approval cards and configure how approvers respond to requests.
Step 1 — Register a Slack Channel
The bot needs to know which channel to post approval requests to. You can register as many channels as needed.
-
In Slack, open the channel where you want approval cards to appear.
-
Type
@PrivMan Approvals(or whatever you named your bot) and send the message. -
The bot replies with a help message confirming the channel has been registered.
Repeat this in each channel you want to receive approval cards.
Step 2 — Approving and Denying Requests
Once a Privilege Manager elevation request is submitted, the bot posts an approval card to the registered channel within 60 seconds.
The card shows:
-
Requester name and username
-
Computer name
-
Policy name
-
Application or command
-
Reason provided
To Approve a Request
-
Select a duration from the dropdown: One Time, 15 min, 30 min, 1 hr, 2 hr, 4 hr, or 8 hr.
-
Click Approve.
-
The card updates to show who approved it and for how long.
To Deny a Request
-
Click Deny.
-
The card updates to show who denied it.
To Revoke an Approval
If a request has already been approved, you can revoke it:
-
Click Revoke on the approved card.
-
The card updates to show it was revoked.
To Edit the Approval Duration
After approving, you can change the duration:
-
Click Edit Time on the approved card.
-
Enter a number and select a unit: Minutes, Hours, Days, or Weeks.
-
Click Update.
Auto-Approve (Optional)
You can configure the bot to automatically approve requests submitted outside business hours. Requests submitted within business hours are posted to Slack for manual approval. Requests submitted outside business hours are automatically approved for 4 hours and a notification card is posted to the channel.
Send any of the following commands as a Slack DM to the bot, or by mentioning it in a channel:
| Command | Description |
|---|---|
autoapprove set mon-fri 08:00-17:00 America/Chicago
|
Set business hours and timezone |
autoapprove enable
|
Turn on auto-approve |
autoapprove disable
|
Turn off auto-approve |
autoapprove status
|
Show the current schedule |
autoapprove clear
|
Remove the schedule entirely |
Timezone examples: America/New_York, America/Chicago, America/Los_Angeles, Europe/London, Asia/Kolkata