Active Directory Supervisors Setup
At the "Supervisor Approval" --> "Process Setup", supervisors can be edited individually for each container (OU/group).
For step-based approval, one or multiple supervisors can be assigned to every level within each container (OU/group).
When saving new supervisors by clicking the "Save" button, validation ensures enough supervisors are set for each container (OU/group). An error message will be appear if there are insufficient supervisors, preventing the "Save" action.
Global Supervisors are not counted towards the minimum required supervisor count.
Assign Supervisors Dynamically Using an Active Directory Filter
Supervisors and OU-based supervisors can be selected by specifying an "Active Directory" filter. Users are promoted to supervisors when they match the filter.
An LDAP query checks if the specified LDAP attribute has the expected value. If the attribute is missing or incorrect, the user is not promoted to supervisor.
The filter applies to all configured active directories.
Each supervisor can only approve or reject files of users within the same container. A container can have any number of supervisors, including none.
Learn how to include or exclude a container. Read Role Mapping for Groups.
Step-based approval: Adding supervisors from filter is not yet available.
Setting Up Group File Approval
If group supervision is set up, users who are part of multiple groups can restrict which group supervisors can approve their files. This restriction only applies to group supervisors. Global Supervisors can always approve a file regardless of this setting.
Restrictions are removed if the approval process configuration is changed.
Edit supervisors from the dropdown menu on the AD groups list to set special supervisor settings for a selected group.
Unlike OU mode settings, supervisors cannot be selected using an Active Directory filter.
Group supervisor mode: in one-stage or multi-stage approval processes, you can choose an AD group as supervisor. If the "Allow Supervision Between Groups" setting is enabled, other groups can be selected as supervisors. Otherwise, only the group under editing can be selected.
Any member of a supervisor-level Active Directory group can approve files uploaded by a member of the current group.
Users in multiple Active Directory groups can choose the designated group for uploaded files in the "Upload File" modal (for further details click here).
Supervisor rights of selected Active Directory groups can be revoked.