Unapproving requests
Bravura Security Fabric authorizers have the ability to 'unapprove' privileged access requests if they are originally listed as an authorizer for the request.
Unapproving a request cancels the request. The request is treated as though it was denied. The unapprove action only affects the specific request; user privileges, user access, and other requests are unaffected.
A privileged access check-out request can be unapproved when:
It has been approved by an authorizer.
It is in the ’Pending’ check-out status.
A privileged access check-out request cannot be unapproved when:
It is in the status of checking out.
The request has been processed.
A privileged access extension request can be unapproved when:
It has been approved by an authorizer.
The request has been processed.
The check-out will still have time remaining once the extension is removed.
A privileged access extension request cannot be unapproved when:
The check-out will no longer have time remaining if the extension was removed.
If you want to cancel a check-out or extension request that can no longer be unapproved, you must terminate the user’s privileged access instead. To do this, you must provide appropriate users with the ”Check in access” privilege.