This guide outlines the flow for requesting execution on macOS devices when the applied policy uses a tiered (multi-level) approval workflow, requiring sequential validation by different approvers.
Requirements
- The application must be linked to a policy with multiple approval levels.
- EPM macOS must be installed and integrated with the platform's backend.
Requesting execution with tiered approval
- Left double click to open the desired application to open it through the OS or EPM macOS screen.
- In the window displayed:
- Fill in the Justification field, explaining the reason for execution.
- (If configured) Set the start and end times for the execution window.
- Click Submit request.
A confirmation message will be displayed: "The execution of this application has been requested from the administrator. Once approved, execution will be allowed."
How tiered approval works
- The request is first sent to Level 1 approvers.
- Once all approvers in the current level approve the request, it automatically moves to the next level.
- Execution will only be allowed after all approval levels defined in the policy have approved the request.
- Execution remains blocked until all approval stages are completed.
- If any approver at any level rejects the request, it will be denied, even if previous levels have approved it.