PIM Manager settings · Settings > Approvals & policy
Allow an administrator to approve their own requests
| Key | ApprovalSelfApprove |
|---|---|
| Where | Settings > Approvals & policy > Approvals: self-approval |
| Type | On / off |
| Default | Off |
| Feature | A second administrator for sensitive changes · Pro Business, Pro Enterprise, Pro MSP |
| Confirmation | PIM Manager asks you to confirm before it is switched on. |
What it does
Separation of duties for approval requests (offboard, revoke and similar): by default the administrator who raises a request may not approve it -- a different administrator must. This switch lifts that rule for tenants with only one PIM Manager administrator.
When enabled
When on: takes effect at once. The person who raised a request can approve it on the Approvals page, and an offboarding change (offboard, Removed, Deleted) committed in the admin grid is committed straight away instead of being held for a second person. Each such decision is recorded as self-approved in the audit, and the card shows who switched it on and when.
When disabled
When off (the default): a request waits until another Admin or SuperAdmin decides it; disabling changes committed in the grid are held as approval requests.
Risk and how to reverse it
One administrator alone can offboard accounts and revoke access, with no second pair of eyes -- a mistake or a compromised administrator account is not caught. Reversible: switch it off; requests raised from then on wait for a second person again. Decisions already made stand.
Requires
SuperAdmin to change. Free (Community) and Pro.
Recommended
Off. Switch it on only while your tenant has a single PIM Manager administrator, and off again as soon as a second one exists.
Related settings
- Second-approver on sensitive changes FeatureGates.makerchecker
- Approval-gated offboarding + revoke (preview) GovernancePreview.approvalsPreview
- Approvals FeatureFlags.approvals
- Second approver PendingSecondApprover
- An approval request expires after (hours) ApprovalRequestTtlHours
Documented for PIM Manager 3.0.70. Written by the PIM Manager team; Invardia publishes it. · All settings · Security review pack