Approver Guide

Table of contents

• Approve or reject elevated access
• Inspect elevated access session activity logs
• Revoke elevated access

When a user requests elevated access to an account, if you are a member of the approver group for that account/OU, you will receive a notification prompting you to log into the TEAM app and either approve or reject the elevated access request.

Approve or reject elevated access

1. Log into the application.
2. In the left-hand menu go to Approvals → Approve requests.
3. You will see all of the requests that are pending your approval. Tick the request and click on View details.
4. Review the information, including the Justification field if provided. Close the pop-up window.
5. With the request still ticked, click on Actions, and either Approve or Reject the request.
6. You might be required to provide a Comment with the reason when approving/rejecting the request.

Approve elevated access demo

Inspect elevated access session activity logs

An approver can inspect actions performed by a requester in near realtime during or after the expiry of elevated access.

1. In the left-hand menu go to Elevated access → Active access.
2. Tick the session you are interested in and click View details.
3. Review the details of the request.
4. Click on dropdown Session activity logs.
5. You can view all of the CloudTrail logs (recorded actions made by the user) since the start of the session.
6. You can use the search bar to search the logs.
7. To revoke access for the user, click Revoke.

Revoke elevated access

An approver can revoke elevated access for a requester in scenarios such as when the initial approval was unintended or when there is evidence of abuse or misuse of elevated access. Follow the steps in the previous section to revoke elevated access.

Inspect/revoke elevated access demo

---