Privileged Access Manager v1 API - Class ManualApprovals (1.0.0) 

public sealed class ManualApprovals : IMessage<ManualApprovals>, IEquatable<ManualApprovals>, IDeepCloneable<ManualApprovals>, IBufferMessage, IMessage

Reference documentation and code samples for the Privileged Access Manager v1 API class ManualApprovals.

A manual approval workflow where users who are designated as approvers need to call the ApproveGrant/DenyGrant APIs for a grant. The workflow can consist of multiple serial steps where each step defines who can act as approver in that step and how many of those users should approve before the workflow moves to the next step.

This can be used to create approval workflows such as:

  • Require an approval from any user in a group G.
  • Require an approval from any k number of users from a Group G.
  • Require an approval from any user in a group G and then from a user U.

A single user might be part of the approvers ACL for multiple steps in this workflow, but they can only approve once and that approval is only considered to satisfy the approval step at which it was granted.

Inheritance

object > ManualApprovals

Namespace

Google.Cloud.PrivilegedAccessManager.V1

Assembly

Google.Cloud.PrivilegedAccessManager.V1.dll

Constructors

ManualApprovals()

public ManualApprovals()

ManualApprovals(ManualApprovals)

public ManualApprovals(ManualApprovals other)
Parameter
Name Description
other ManualApprovals

Properties

RequireApproverJustification

public bool RequireApproverJustification { get; set; }

Optional. Do the approvers need to provide a justification for their actions?

Property Value
Type Description
bool

Steps

public RepeatedField<ManualApprovals.Types.Step> Steps { get; }

Optional. List of approval steps in this workflow. These steps are followed in the specified order sequentially. Only 1 step is supported.

Property Value
Type Description
RepeatedFieldManualApprovalsTypesStep