Global Authorization Configuration

By default, the Global Configuration handles the overall authorization process. Use this to specify who authorizes the request, and other details. If any value within an individual operation is modified, those updated values will take precedence over the values specified in the global configuration.

Procedure

1. From the Command Center navigation pane, go to Manage > Security.

2. Click Multi person authorization tile.

3. On the top-right of the page, click Edit global configuration.

4. On the configuration dialog box:

   • Enter a user group to authorize requests from the MPA operation:

     • User groups which can authorize the request: The users of the selected user groups can authorize requests from the MPA operation.

     • Default approvers user group: The users of the selected user group can authorize requests from the MPA operation. This applies when no custom approver group is specified either in the global configuration or at the operation level. By default, the Master user group is used at the global level, and the Tenant Admin group is used at the tenant level.

   • Enter the default timeout time:

     • Default timeout for authorization in days: If the authorization request is not authorized after the selected time elapses, then the authorization request expires.

   • Enter the Number of approvers who must approve the request.

   • Image URL for Email Header: Enter a header image URL that appears in the authorization-related emails sent to the approvers and requestor.

   • Number of days after which reminder email for pending approval will be sent: Enter the frequency of reminder emails to authorize a pending request. By default, the frequency is set to 1 day, so reminders are sent daily.

   • Use Global SMTP Sender Email: Enable this toggle key to use the SMTP settings applied on the Commserve computer.

   • Approval Routing For Tenants:

     • Route to Tenant Approvers: All approval requests will be routed to Tenant level approvers. This option is selected by default.

     • Route to MSP Approvers: All approval requests will be routed to MSP level approvers.

     • Include Tenant Approvers in MSP Routed Approvals: When the toggle key is enabled, both Tenant approvers and MSP approvers can participate in granting or revoking an authorization request. Either group may determine how the request should be handled. This option is applicable only when Route to MSP Approvers is selected as the routing option.

     Note

     When the routing option is set to Route To MSP Approvers, the approvers are selected from the MSP level, while all other settings continue to be based on the tenant.

5. Include Requestor in Email: Toggle this option to include the requestor in the emails related to authorization.

6. Include Approval Links in Email: Toggle this option to include the links to Accept, Reject, or view the Approval request on the Command Center.

7. Customize email text to replace the approval links: You can specify alternative text to replace the approval links included in the email.

8. Click Save.