Approval Request and logging Admin Console Permissions

Question

I do not want to give my helpdesk personnel Service Administrator access to the Adaxes console. I DO want to give them the permissions to view and change Approval Requests(for ALL) and view access to everything in Logging. What permissions do I need to give them to allow them only this access? Thansk!

Answer 1

Hello Michael,

Unfortunately, currently you cannot access Logging from the Adaxes Web Interface. This feature is in our TODO list.

As a workaround, you may access log records using a PowerShell script. See the section called Get Adaxes Log Records Using Script in the View AD Operations Performed via Adaxes Tutorial and also the Accessing Log Records article in the Adaxes SDK.

Also, you cannot allow a user who is not an Adaxes administrator to view ALL approval requests. Users who are not administrators can view only their Approval Requests (i.e. the requests either initiated by them or assigned to them). As a workaround, you may create a Scheduled Task that will add people from the helpdesk staff to the list of Approvers of an Approval Request if the Approval Request remains pending for X days/hours.

Comments

Please add these to your enhancement request list. You have other permission settings to allow users to manage parts of the configuration. We should be able to delegate Approval Request Review/Modifications and Logging to non-console administrators. Thanks!

---

Michael,

As for Logging, this is already in our TODO list. I've added +1 to that one.

As for delegating permissions to view Approval Requests of other Approvers, thank you for the proposal. I've added this to our TODO list.

---

You can add another +1 to integrating the logs into the web console. That is a feature we would love to have.

---

Done. We plan to have it available in the very beginning of 2013.
Thanks.

---

Michael,

I have a question regarding Approval Requests. If you want your Help Desk team to be able to approve/deny requests, why don't you add them to the list of approvers?

---

I want them to be able to review and add(should someone be on vacation for example) approvers to existing pending approvals. I do not wish them to be part of the original approval process. Thanks!

---

OK, point taken. Thanks for the explanation.