Exception Approver Admin permissions

Controls access to the Exception Management section on the Server Settings page, located at SettingsConfigurationsGeneralServer Settings.

This permission governs who can configure the exception approval workflow, specifically, whether exceptions require approval, and managing the list of designated approvers.

Caution

Users also need General Configuration View permission to view or View/Edit Exception Management in Server Settings.

Permission Description Roles Example
None No access to the Exception Management section on the Server Settings page. Users cannot view or modify the approval workflow configuration and the list of approvers. SOC Tier 1 and Tier Analysts: No need for visibility into approval workflow configuration.
View The Exception Management section is visible on the Server Settings page. Users can view the approval configuration workflow and the list of approvers (names and emails). SOC Tier 3 Analyst and Threat Hunter: Can view the approval workflow to understand the exception approval process and whether the exceptions they encounter have been approved.
View/Edit Read and write access to the Exception Management section on the Server Settings page. Users can configure the exception approval workflow and manage approvers. Security Engineer: Full access to toggle approval requirements and manage the approvers list.

Required and recommended permissions

Consider adding the following permissions:

Permissions Permission Level Reason
General Configuration View or View/Edit <ul><li>View: The Exception Management section is on the Server Settings page. Without this permission, users cannot view the section. Required.</li><li>View/Edit: Users who configure exception approval workflows may also need to manage other server settings (email contacts, Google Maps key, etc.).</li></ul>
Issue Exclusion View Approver administrators should understand the exclusion/exception rules they are configuring for approval workflows. Without this, they are configuring approval settings without visibility into the rules being approved. Strongly recommended.
Exception Management Admin View Understanding the exception rules that will go through the approval workflow helps configure appropriate approvers and approval requirements. Strongly recommended.