CA PAM | Multiple Level of Approval in Dual Authorization

Idea created by Eric.Chew on Aug 2, 2017
    New
    Score11

    As of now CA PAM is only able to do multiple approvers but all at the same level.

     

    For example, a password view request is sent to Approver A and B. If either of them approves it , the password view request is then approved.

     

    This is the currently flow of Dual Authorization in CA PAM.

     

    CA PAM can improved by doing multiple level approval.

     

    For example, a password view request is sent to Approver A and B. Approver A approves, but Approver B have yet to approve or deny the request, the password view request is either expired or denied.

     

    Both Approver A and Approver B MUST approve the request in order for the password to be viewed by the requestor.

     

    This is what i am referring to and it will be good that multiple level approval can work with multiple approvers.