mirror of
https://github.com/fosrl/docs-v2.git
synced 2026-09-19 04:19:09 +02:00
anjan713
5d6448aafa
Add context-aware alt text to 36 images across 20 MDX files flagged by mint a11y. Descriptions are derived from each image's caption and surrounding step text. Part of fosrl/docs-v2#116.
44 lines
1.8 KiB
Plaintext
44 lines
1.8 KiB
Plaintext
---
|
|
title: "Device Approvals"
|
|
description: "Only allow trusted devices to connect to an organization"
|
|
---
|
|
|
|
import PangolinCloudTocCta from "/snippets/pangolin-cloud-toc-cta.mdx";
|
|
|
|
<PangolinCloudTocCta />
|
|
|
|
|
|
|
|
<Note>
|
|
Only available in [Pangolin Cloud](https://app.pangolin.net/auth/signup) and [Enterprise Edition](/self-host/enterprise-edition).
|
|
</Note>
|
|
|
|
By default, any client configured with valid credentials can connect to an organization. To enhance security, you can enable device approvals, which require each new device to be manually approved by an administrator before it can connect.
|
|
|
|
When device approvals are enabled, the first time a user connects a new device to the organization, the device will be marked as "Pending Approval." An administrator must then review and approve the device in the management console before it can access organization resources.
|
|
|
|
<Frame>
|
|
<img src="/images/device_waiting_approval.png" alt="Device marked pending approval in the Pangolin dashboard" />
|
|
</Frame>
|
|
|
|
All approvals can also be managed from a central page as they stream in to allow admins to approve or deny devices quickly.
|
|
|
|
<Frame>
|
|
<img src="/images/approvals_page.png" alt="Approvals page listing pending devices in the Pangolin dashboard" />
|
|
</Frame>
|
|
|
|
## Enabling Device Approvals
|
|
|
|
Device approvals are enabled on a per-role basis. To enable device approvals for a role, follow these steps:
|
|
|
|
1. Click on the **Roles** tab.
|
|
2. Select the role you want to enable device approvals for.
|
|
3. Toggle the **Require Device Approval** option to enable it.
|
|
4. Save your changes.
|
|
|
|
Once enabled, any new user connecting with that role will require approval from an administrator before it can access organization resources.
|
|
|
|
<Tip>
|
|
You cannot enable device approvals for the "Admin" role.
|
|
</Tip>
|