You can prevent from a malicious or accidental data loss by using the multi-person authorization feature.
1. Can the MPA operations be edited or deleted?
To ensure security, the authorization operations cannot be edited or deleted. They can only be disabled for 24 hours, after which they will be re-enabled automatically.
2. Do the changes to the configuration of MPA operations need approval?
Yes, any admin user making changes to configurations of MPA operations must receive approval from another admin user.
3. Do users need special permissions to be an approver to authorize requests?
No, users do not need any specific permissions to approve a request. Instead, they must belong to the user group configured as the approver group.
4. How to select the user group that must serve as the approver group?
The potential user group must have equal or more users compared to the number of approvers configured on the feature.
5. What happens if the number of approvers in the user group is less than the number of approvers configured?
In the default scenario, where the master group is the approver group, and if a member of this group tries to delete an entity and no other approvers exist besides this user, an email notification will be sent to prompt the user to include additional members in the master group and resubmit the request. Alternatively, if an approver group has been specified, the task will remain in a pending state (until timed out), awaiting further approvals. In such cases, additional approvers must be added, and the request must be resubmitted.
6. What is the Allow Tenant Admins To Opt In toggle key for?
By default, the toggle key is disabled, and all tenants associated with the CommCell must obtain approval before performing a specific operation.
When the toggle key is enabled, only tenant users with the additional setting configured will require approval to perform certain deletion operations. Tenant users without this configuration can delete the entity without requiring approval.
7. What happens when the same configuration has different values between Global Configuration and the Operation?
The value set in the authorization operation takes precedence over the Global Configuration.
8. How are the users preferred to be the approver based on the configurations?
Based on the following scenarios the users are chosen as the approver:
-
When no user or user-group is designated for approval, and the default approver group is either the master group or any other group, the users within the specified approver group are considered as the approvers.
-
When the default approver group is empty and the user or user-group is set for approval, then the particular user or the user-group members are considered as the approvers.
-
When the default approver group is empty and the users and user group is set empty, then the master group will be considered as the approvers.
-
When the tenant user is logged in, the tenant administrator group members are considered as the approvers.