Manage administrator approvals
Manage administrator approvals in the "Administrator approvals" window. You need the "Administrator approval creator" privilege to access the window.
You can protect the following with an administrator approval:
You can also remove an administrator approval from a unit, role, or privilege in the window.
"On behalf of" rights can also be protected from the "Allocate 'On behalf of'" dialogue.
The "Administrator approvals" window
On the "Administrator" tab in the main window, click on Administrator approvals to open the "Administrator approvals" window.
At the top of the window is the ribbon with menu items from which you can attach and remove administrator approvals. Underneath you can switch between the tabs "Units", "Roles", and "Privileges". In the middle of the window, you can see an overview of already attached administrator approvals on the selected tab.
Administrator approval on a unit
An administrator approval is started when an administrator wants to assign a user a role in a unit that is protected by an administrator approval. The user is assigned the role in the unit automatically upon final approval.
Select the "Units" tab in the "Administrator approvals" window to see the list of units with an attached administrator approval.
Click on an administrator approval to see a preview of the selected unit on the right side of the window. The preview corresponds to the unit’s properties, which you can also find in the participant register.
The list contains the following columns:
| Column | Description |
|---|---|
"Unit" |
Displays the unit name. |
"Location" |
Displays the unit’s location in F2’s unit structure. |
"Administrator approval template" |
Displays the administrator approval template attached to the unit. |
Attach administrator approval to a unit
Click on the "Attach to unit" menu item in the ribbon in the "Administrator approvals" window.
The "Attach to unit" dialogue opens.
In the "Unit" field, select the unit you want to protect with an administrator approval. Once you start typing, F2 searches the participant register for the unit. Alternatively click on 
to open the "Choose participant" window, where you can search directly in the participant register.
Tick the box "Attach administrator approval template to sub-units" if you want the administrator approval to be applied if a user is assigned a role in the unit’s sub-units.
In the "Administrator approval template" drop-down menu, select the desired template.
Click on Attach to attach the selected template to the unit.
Administrator approval on a role
An administrator approval is started when an administrator wants to assign a user a role that is protected by an administrator approval. The role is assigned to the user automatically upon final approval.
Select the "Roles" tab in the "Administrator approvals" window to see the list of roles with an attached administrator approval.
The list contains the following columns:
| Column | Description |
|---|---|
"Role" |
Displays the role name. |
"Privileges" |
Displays the privileges allocated to the role. |
"Administrator approval template" |
Displays the administrator approval template attached to the role. |
Attach administrator approval to a role
Click on the Attach to role menu item in the ribbon in the "Administrator approvals" window.
The "Attach to role" dialogue opens.
In the "Role" drop-down menu, select the role from the list that you want to protect with an administrator approval.
In the "Administrator approval template" drop-down menu, select the desired template.
Click on Attach to attach the selected template to the role.
| If a role used in connection with a security group membership is protected by an administrator approval, adding new members will start the administrator approval flow. |
Administrator approval on a privilege
An administrator approval is started when an administrator wants to add a privilege to a role that is protected by an administrator approval. The privilege is assigned to the role automatically upon final approval.
Select the "Privileges" tab in the "Administrator approvals" window to see the list of privileges that have an attached administrator approval.
The list contains the following columns:
| Column | Description |
|---|---|
"Privilege" |
Displays the privilege name. |
"Administrator approval template" |
Displays the administrator approval template attached to the privilege. |
Attach administrator approval to a privilege
Click on the Attach to privilege menu item in the ribbon in the "Administrator approvals" window.
The "Attach to privilege" dialogue opens.
In the "Privilege" drop-down menu, select the privilege from the list that you want to protect with an administrator approval.
In the "Administrator approval template" drop-down menu, select the desired template.
Click on Attach to attach the selected template to the privilege.
| If the "Archive access" privilege, which is used in connection with security groups, is protected by an administrator approval, creation of new security groups will start the administrator approval flow. |
| It may be relevant to protect the "Privilege administrator" privilege, as it grants access to creating new roles and assigning, removing, and editing privileges for a role. |
Remove administrator approval
Select the administrator approval you want to remove from one of the tabs in the "Administrator approvals" window. Click on Remove administrator approval in the ribbon.
The dialogue "The action requires administrator approval" opens.
When you remove an administrator approval, your action will start the overriding administrator approval for changes. Click on Yes to start the overriding administrator approval. The selected administrator approval will be automatically removed upon final approval.
| If no overriding administrator approval is set up for changes, you will be asked to confirm whether you want to remove the administrator approval when you click on "Remove administrator approval". |