How can we prevent users with multiple roles from circumventing required approvals pre-condition?
We are setting-up three required roles for approving test cases (in pre-conditions). This seems to work well if users only have one role assigned to them from the three required roles. However, if a user gets two of the required roles then they can approve for both of their roles and only two people are required to approve. Is there a way to require specific roles (in this case, three roles) AND require that at least three people approve?
One answer
Hi Paul,
One practice is to clarify the role of approval using the approval comment when submit for approval, for example add one description "Request Approval by Test Lead" when submit for approval. It could not automatically validate in the workflow but hope could help you some.
Best Regards,
Bing Dong
Comments
Hi Bing Dong,
I found that if I require the roles (in this case 3 different roles) and require 3 "everyone" then I accomplish my goal. Even if one user has all three roles, at two other people will be required to approve.
Thanks,
Paul Spalitta
Would the ability to require unique approvals (ie. 3 approvals from 3 different users, not just different roles) be useful (as an enhancement)?
Hi Lisa,
I don't know that we would use such a targeted approval concept. We are discussing enhancement concepts that go in the opposite direction, conceptually. We want to require approvals based on role but allow anyone having that role approve on-behalf of the person that was specifically chosen for a particular artifact approval. For example, I setup an approval for a Test Case with Jim, Sally and Beth. I need the Test Case approved ASAP but Jim is out sick. Rather than needing to start the approval process over, I want to be able to call Jim's boss who has the same Role(s) as Jim (or one of Jim's peers) and have him/her approve on Jim's behalf. Right now, due to the pre-condition rules that we have setup, if any change needs to be made to an Approval Group, we need to archive the current Approval Group and start the approval process from scratch.
Thanks,
Paul