Skip to main content

Hi everyone,

I have an problem when configuring Jump Approval in my PRA and I would like to know if it’s a bug or if I missed something.

I've created a Jump Policy requiring users to request approval to access machines.
In the approvers, I've set up a team called the “IT Team” and I've indicated that they can't approve their own requests.


There are two members in “IT Team”.

When one of the members tries to connect to a machine, a form asks him to enter a reason and a duration. In the Remote Access Console, the user who made the request does not see any notification and cannot self-approve. The second team member can. It works in the other way round.

The problem here is that the user who made the request, who normally can't self-approve, still receives an approval link by e-mail, and this link works. The parameter is half-operational, so.

 

Please note that these are Entra users and not local users of the solution (I'm pointing this out even though I don't think it's related).

Thanks for the detail information.  If you suspect this being a software bug or if the intended behavior is in question, I recommend opening a support case and let our support engineers help determine.  

 

Regards,

Todd


Does IT Team use a shared inbox/mailing list? I don’t believe the approval link has any sort of authentication piece, so if approval requests are sent to a mailing list that the requester is on, the requester will be able to approve themself


Does IT Team use a shared inbox/mailing list? I don’t believe the approval link has any sort of authentication piece, so if approval requests are sent to a mailing list that the requester is on, the requester will be able to approve themself

Thank you for your answer. The approval link is not sent to a mailing list but the user’s mailbox. 

As tdearman said, I think it’s a software bug so I have finally opened a support case.


Reply