Approval Workflows¶

The approval system gates access to sensitive credentials, ensuring that high-value secrets are only accessed with explicit authorization from an authorized approver.

How It Works¶

sequenceDiagram
    participant Member
    participant APM
    participant Manager

    Member->>APM: Request access to sensitive entry
    APM->>APM: Check if approval required
    APM-->>Member: Access pending approval
    APM->>Manager: Notification of pending request
    Manager->>APM: pm-team approvals approve <id>
    APM-->>Member: Access granted

Managing Approvals¶

Viewing Pending Requests¶

pm-team approvals list

Shows all pending approval requests with:

Request ID
Requester name and role
Entry requested
Timestamp
Status

Approving a Request¶

pm-team approvals approve <request_id>

Denying a Request¶

pm-team approvals deny <request_id>

Who Can Approve¶

Role	Can Approve
Owner	✅
Admin	✅
Manager	✅
Member	❌
Viewer	❌

Audit Trail¶

All approval actions (requests, approvals, denials) are recorded in the organizational audit log with:

Timestamp
Action (APPROVAL_REQUESTED, APPROVAL_GRANTED, APPROVAL_DENIED)
Requester
Approver
Entry details