Skip to main content

Approvals inbox

Approvals lists every pending approval in your organization in one place, so you don't have to check each hunt, endpoint and fleet for things waiting on a decision. It splits them by who they wait on: Waiting on you and Waiting on someone else.

Beta

This feature is currently rolling out and may not be enabled for your organization. The Approvals menu item appears only where it is enabled.

Open the inbox​

Click Approvals in the navigation menu. A badge on the menu item counts the items waiting on you.

The inbox refreshes on its own about every 30 seconds while the tab is open.

What appears here​

The inbox gathers approvals from:

SourceWhat waitsWhere you act on it
Endpoint actionsAction runs waiting for approval, such as a script run or a quarantine.The run's page. See Follow an action.
HuntsSteps Scout proposed and checkpoints waiting for a decision in active hunts.The cell in the hunt. See Approvals and Needs you.
InvestigateQuarantine, legal-hold and settings requests, per fleet.Endpoints › Investigate › Approvals. See Approve requests.

You only see sources that are enabled for your organization.

Waiting on you, or on someone else​

  • Waiting on you lists items you're allowed to approve.
  • Waiting on someone else lists items you can see but can't approve. Each one says why, for example "You requested this, so someone else must approve it."

Under a two-person rule, you never see your own request under Waiting on you, because someone else has to approve it.

Read an item​

Each item shows:

  • its source and the rule it falls under, for example Two people or Org admin;
  • who asked for it and who can approve it, for example "Someone other than Sam must approve.";
  • when it lapses;
  • a link to the page where you act on it.

The inbox doesn't approve or reject anything itself. Click Review or Open to go to the item's own page, where you approve, reject, withdraw or cancel it. Who may approve follows your organization's approval rules.

If one source can't be loaded, it shows an error with Retry. The other sources still appear.

Next steps​