This guide outlines the steps to execute an application on macOS devices using policies that require a justification and governance code.
Requirements
- The application must be associated with a policy configured with approval workflow.
- Justification (mandatory or optional) enabled in the policy
- Execution window configured as mandatory or optional
Request execution with mandatory justification
- Left double click to open the desired application to open it through the OS or EPM macOS applications screen.
- In the window displayed:
- Fill in the Justification field (mandatory field, indicated by a red icon).
- If configured in the policy, define an execution window:
- Start date/time: must be later than the current date/time.
- End date/time: must be later than the start date/time (maximum of 48 hours).
- Click Submit request.
A confirmation message will be displayed: "The execution of this application has been requested from the administrator. Once approved, execution will be allowed."
Request execution with optional justification and execution window
- Left double click to open the desired application to open it through the OS or EPM macOS applications screen.
- In the window displayed:
- Fill in the Justification field (if required).
- The execution window may appear as optional:
- If you need to restrict the execution, fill in the start and end date/time fields.
- If no restriction is needed, leave the fields empty.
- Click Submit request.
A confirmation message will be displayed indicating that the request was sent to the administrator for approval.
Expected behavior after submitting the request
Once the request is submitted, the following behaviors may occur depending on the administrator’s response in the Admin Interface Web:
| Request status | EPM macOS behavior |
|---|---|
| Approved | Execution is allowed within the configured window. |
| Pending | A message is shown: "Your request is still pending review." |
| Rejected | A message is shown: "Your last request was rejected by the administrator." |
| Outside the execution window | A message is shown: "The execution time has expired. Please submit a new request." |
The administrator may modify the requested execution window. The EPM agent will automatically apply the updated window.
All actions related to request submission, approval, and execution are logged locally.