Active Directory Supervisors Setup

The next step in the Supervisor Approval Process Setup is to Edit supervisors individually for each container (OU/group).

When in Step based stage approval process, one or multiple supervisors can be assigned for every level to each container (OU/group).

When trying to save the new added supervisors by clicking the Save button, a validation will be done in order to ensure that there are enough supervisors set for each container (OU/group). If there are insufficient supervisors, an error message will be displayed and the save action will not be finalized.

Assign supervisors dynamically by using an Active Directory filter

For both the supervisors and Organizational Unit based supervisors, you can choose to select a supervisor by specifying an Active Directory filter. This way, users are promoted to supervisors whenever they match the specified filter.

To verify if a certain user matches the filter, an LDAP query is executed to check if the specified LDAP attribute has the expected value. If the attribute does not exist or if the value is different, the user will not be promoted to the supervisor role.

Please note that for supervisors configuration, the filter applies to all your Active Directories (if you have configured more than one).

Each supervisor can only approve or reject files of his supervised users (in the same container). A container can have any number of supervisors, including none.

Learn how to include or exclude a container by going to Role Mapping For Groups.

Setting up group file approval feature

If group supervision is set up any user, is part of multiple groups, can restrict which group supervisors can approve their files. This restriction only applies to group supervisors. Supervisors or users with the Global Supervisor role will always have the option to approve a file regardless of this option.

By selecting Edit Supervisors from the dropdown menu on the right side of the list of AD groups, you can setup the special supervisor settings for the selected group.

Unlike the OU mode settings, you cannot select supervisors by using an Active Directory filter.

The Group supervisor mode provides in one-stage or multi-stage approval process the possibility to choose an Active Directory group as supervisor, beside selecting individual users. If the Allow Supervision Between Groups setting is enabled, any other group, otherwise only the group under editing can be selected as supervisor.

If an Active Directory group selected as supervisor, any member of this group can approve the file which was uploaded by the member user of current group.

The selected Active Directory group can also be excluded from the supervision, by enabling the corresponding switch.