Manage approvers

This document provides information about the Approvers report screen, which displays the users registered as approvers in Segura™.

The users registered on this screen are the global approvers. In a user review and certification campaign, a global approver reviews the users who have no other reviewer. When the Enable approval workflow for users review and certification parameter is on, the global approver for the User Management module also approves each completed review. For details, see Reviewers and global approvers.

Path to access

1. On Segura™, in the navigation bar, hover over the Products menu and select Settings.
2. In the side menu, select Access control > Manage approvers.

Actions menu

Search fields

Report fields

• ID.
• Module.
• Name.
• Username.
• Level.
• Added by.
• Added on.
• Changed by: name of the user who changed the record.
• Changed in: date and time when the record was changed.
• Actions:
  • Disable: deactivates the approver. In the confirmation box, click Yes to confirm the action.

Global approvers by module

The module of the record defines whether the global approver takes part in review and certification campaigns. Only global approvers for the User Management module do. They:

• Review the users who have no reviewer in a user review campaign.
• Receive escalated reviews at the end of the reviewer chain.
• Approve each completed review when the Enable approval workflow for users review and certification parameter is on. For the parameter, see Approval workflow.

Global approvers registered for other modules do not receive campaign reviews. A user can be a global approver for several modules at the same time.

Records on this screen cannot be edited. To change the module of a global approver, remove the record and register the user again with the new module.

Global approvers and campaigns

Segura™ refuses to create a user review campaign when no global approver exists for the User Management module, with the message A global approver must be defined. Configure one to continue.

A global approver added while a campaign is running joins that campaign.

Removing the last global approver

While a user review campaign is Enabled, Scheduled, or Processing, Segura™ refuses to remove the last global approver for the User Management module on this screen. In the campaign, the global approvers section is read-only in those statuses. Segura™ shows the message You cannot remove every global approver. The campaign needs at least one User management global approver. Add another global approver before removing this one. The approver stays registered.

To replace the last global approver, register the new global approver first, then remove the previous one.

The rule does not apply when:

• Another global approver for the User Management module remains.
• No campaign is Enabled, Scheduled, or Processing. Closed, finished, and paused campaigns do not count.
• The global approver is registered for another module.

Deactivating the user of the last global approver

Segura™ does not prevent you from deactivating or deleting a user who is the last global approver for the User Management module. Instead, a job that runs every hour pauses every Enabled, Scheduled, or Processing campaign that has no active global approver for that module. Every user with the PAM Administrator or System Administrator role receives a notification in the notification center and by e-mail.

To resume a paused campaign, register a new global approver for the User Management module, then resume the campaign in the campaign report. For details, see Campaign.

Audit

Segura™ records in the audit trail every global approver added or removed, on this screen or in the campaign, with the user who performed the action and the user affected. To view these records, go to Reports > Audit.

# Approvers screen

This screen provides the necessary information for registering an approver.

Related topics

• Reviewers and global approvers.
• Register an approver user.
• Manage approver users.
• Campaign.
• Create a user review campaign.