Solved

GetAndProcessAuthentication workflow

  • 26 January 2022
  • 10 replies
  • 1084 views

Badge +4

This is the configuration. The administrators are also not members of the Master group but of the CV Admins group that does have rights to delete a client. When we make the administrators a member of the Master group, then they will receive an email.  Is this normal behavior ? 

icon

Best answer by Mike Struening RETIRED 8 February 2022, 20:17

View original

If you have a question or comment, please create a topic

10 replies

Userlevel 7
Badge +23

@Gavaskar , let me look into that for you.  I’m not seeing too much documentation on this.  I believe this is normal, though I want to be sure for you!

Userlevel 7
Badge +23

Adding some contextual detail here as well:

Workflow location:

https://cloud.commvault.com/webconsole/softwarestore/#!/136/670/11878

Details:

Description

Workflow to process authorization requests from the following Business Logic workflows:

  • Client Properties Modification Authorization
  • Subclient Properties Modification Authorization
  • Delete Backup Set Authorization workflow
  • Delete Client Authorization workflow
  • Delete Job Authorization workflow
  • Delete Mount Path Authorization workflow
  • Delete Storage Policy Authorization workflow
  • Restore Request Authorization workflow

Download and deploy the Get and Process Authorization workflow before setting up the preceding workflows.

For detailed information about Business Logic Workflows, see Creating a Business Logic Workflow.

Workflow Configuration

After the Get and Process Authorization workflow is setup (downloaded and deployed in your CommCell environment), it is automatically run whenever one of the preceding Business Logic workflows is executed.

To enable a user or user group (other than the Master user group) to authorize or to authenticate requests from the preceding Business Logic workflows, go to the workflow Properties dialog box. On the Configuration tab, select the user or user group:

  • Users who can authenticate the request: The selected users can authenticate or authorize requests from the preceding Business Logic workflows.
  • User groups which can authenticate the request: The users of the selected user groups can authenticate or authorize requests from the preceding Business Logic workflows.

Requirements

Commvault software version: V11 with Service Pack 7 (or higher).

Importing the workflow

Follow the steps in Download Workflows from Software Store to import the workflow into the CommCell Console.

If your CommCell cannot directly connect to the Commvault Store, download the XML and Import the Workflow into CommCell Console.

Additional Information

For detailed information on workflows and how to use them, see Workflow.

Badge

Yes based on Above configuration since CV Admins are the users who can authenticate the request. Any user part of this group would get an email to Approve the request.  

Badge +2

Hi @Saurabh Goswami ,

 

If allowed to hitch onto this tread, I have a question in regards to an issue. We have also configured specific groups like in this case, but when a member of the Master group delete’s a job this does not trigger an email to the approver user group but the job just get’s deleted. If anyone from the configured user group does the same an email get’s sent out and approval is required to delete the job.

 

Is this expected behavior or should master’s also trigger the getandprocessauthorization workflow when doing a job deletion?

 

P.S.  running fr25.14

 

 

BR,

Luís Constantino

Badge +4

Yes based on Above configuration since CV Admins are the users who can authenticate the request. Any user part of this group would get an email to Approve the request.  

Hi Saurabh,

indeed, that is when they are members of the master group. When they are out of that group. they don't get an email. that's actually what you don't want because then you have to add an unnecessary number of users in the master group. what is the use of the user rights and groups

Badge

Hi @Luis Constantino   Yes by default master user group’s users are exempt from requiring authorization .

That can be changed to allow all master users also to take authorization via setting this configuration on ‘Delete Jobs Authorization’ Workflow 

 

 

Badge

Hi @Gavaskar  

Could you please escalate as a ticket. We would have a look at the configuration with one of the users as examples where the user is not* present in ‘master’ user group and present in ‘CV Admins’ User group and still not getting the approval emails.  

 

Userlevel 7
Badge +23

@Gavaskar , can you share the case number you opened (and if one was not created, can you do so and share with me)?

Thanks!!

Badge +4

Hi Mike, 

hereby the ticket : Incident Update: 220204-207 | Business Logic Workflow not Working | CVLT::0657024026

Badge +4

@Mike Struening  : Incident Update: 220204-207 | Business Logic Workflow not Working | CVLT::0657024026