User Setup

After completing the Azure Bot Setup, register a Teams channel to receive approval cards and configure how approvers respond to requests.

Step 6 — Register the Conversation

The bot can only post Adaptive Cards to channels it has a saved conversation reference for. The reference saves automatically on the first message — you just need to trigger one.

In the Teams channel, send any message that mentions the bot:

@PrivMan Approvals hello

Watch the container logs for confirmation:

[azure_bot.conversation_store] INFO: Saved conversation reference: 19:<id>@thread.tacv2

The bot replies with a welcome card showing auto-approve schedule controls. This card is not an approval request — it confirms the bot is reachable and the conversation has been registered.

The conversation reference persists at /app/data/conversation_references.json inside the container, mapped to the privman-conversations named volume. It survives container restarts.

Step 7 — Approving and Denying Requests

Once a Privilege Manager elevation request is submitted, the bot posts an Adaptive Card to the registered channel within 60 seconds.

The card shows:

  • Requester name and policy name

  • Computer name

  • Duration dropdown: One Time, 15 min, 30 min, 1 hr, 2 hr, 4 hr, or 8 hr

  • Approve and Deny buttons

To Approve a Request

  1. Select a duration from the dropdown.

  2. Click Approve.

  3. The card updates to show who approved it and for how long.

To Deny a Request

  1. Click Deny.

  2. The card updates to show who denied it.

Privilege Manager applies the result on the endpoint immediately after the approver responds.