Skip to main content

Configuring phased authorization

If phased authorization is enabled, click the Authorization tab, then:

  • Click Add new… if you want to add a phase.

  • To change the order of phases, change the numbers in the Authorization phase column and click Update.

  • Select a phase to define authorizers and settings.

Parallel Authorization

A parallel authorization process is one where multiple authorizers are invited to comment concurrently – i.e., the identity management system does not wait for one authorizer to respond before inviting the next.

Parallel authorization has the advantage of completing more quickly, as the time required to finish an authorization process is the single longest response time, rather than the sum of all response times.

Click below to view a demonstration of creating a LINUX-APPROVERS user class to be used as a secondary set of authorizers for parallel authorization.

Click below to view a demonstration including the following steps:

  • Enabling parallel authorization in Bravura Privilege

  • Configuring parallel authorization for a managed system policy

  • Adding rules to the authorization extdb table to include a secondary authorizer user class

  • Modifying rule actions in the team management extdb table

  • Requesting to check out an account, viewing authorizers and approving the request