Organization Change Approvals

Ensure select changes to your organization settings require additional approvals.

Overview

Organizations have a number of settings and configurations that allow you to implement proper controls and ensure secure behavior across the platform. Organization administrators or those with manage and edit organization permissions have the ability to manage controls and organization-wide settings.

In order to provide organizations greater control of organization changes, you can enable Organization Change Approvals which will require additional approvals from other organization administrators before changes go into effect.

📘

Do you want to enable Organization Change Approvals?

Contact your Customer Success Manager or reach out to [email protected].

Governed Changes

Currently this control governs the following organization settings:

Setup

Prerequisites

  • SCIM must be enabled for your organization
  • You must have a role labeled "Administrators". Users with this role will be responsible for approving changes.
  • The "Administrators" role must have manage and edit permissions to the organization.
  • There must be at least 2 members in the "Administrators" role

Enable Organization Change Approvals

To enable Organization Change Approvals, ensure that you meet the prerequisites outlined above. Once you meet the prerequisites, please contact your Customer Success Manager or reach out to [email protected].

How it works

When a change is made to an object governed by this control, all other users that are part of the "Administrators" role will be alerted to the change via email. They can then approve or deny the change.

Until the change is approved, denied or cancelled, the following applies:

  • All pre-change configurations will remain in place until the pending change is approved.
  • No additional modifications can be made

FAQs

When are approvals required?

For the objects governed by this control, any attempt to create, modify, or delete an object will require an approval from another Administrator.

Can I approve my own change?

When this control is enabled, the user who made the change cannot approve or reject the change. The additional approval must come from another user in the "Administrators" role.

Who can approve changes?

Users in the "Administrators" role are able to approve or reject changes made by others.

Can I cancel or undo my change?

The user who made the change has an option to cancel it if they wish to undo their action.

Can others make changes while one is pending?

Once a change has been made, no further modifications can be made to the object until the change is either accepted or denied.

When do approved changes take effect?

Upon approval, changes will be immediately applied. Alternatively, if the change is rejected, there will be no modifications.


What’s Next

Next learn how to approve or deny organization changes