Approval Workflow / Change Request System for Shared Vaults

Approval Workflow / Change Request System for Shared Vaults

1 vote

avatar

Hello Devolutions Team,

we are currently using a shared vault within our team and would like to suggest an enhancement regarding permission management and change control.

At the moment, users with write access can directly modify or delete entries. Restricting those permissions completely is also not ideal, because it would require users to contact team leads or administrators for every small change.

A more flexible and secure approach would be a built-in approval workflow or change request system, similar to how firewall or infrastructure changes are handled in enterprise environments.

Example workflow:

  • Users can propose changes to entries (edit, move, delete, etc.)
  • The changes are submitted as a “Change Request”
  • Designated approvers (e.g. team leads or admins) receive a notification
  • The change only becomes active after approval
  • Optional: audit trail/history of requested and approved changes


This would improve:

  • Security and governance
  • Protection against accidental deletion or modification
  • Delegation without giving full unrestricted write access
  • Transparency and accountability within shared vaults


Is something like this planned for future versions, or could it be considered as a feature request?

Thank you!

All Comments (1)

avatar

Hello,

At the moment, this is not something we had planned, but to me, this sounds like an expansion of our existing temporary access feature. While we don't currently have this concept of "change requests", the temporary access feature can be used alongside permission sets, which allows a user to request an access for, for example, specifically the delete permission on the entry. This allows you more granular control over which permissions you grant to a user, to restrict what actions they can perform with an entry, and for how long.

Maybe you can leverage the temporary access feature in the mean time.
We will note this as a possible improvement, and we will keep an eye out for additional feedback to help us judge of the priority we should give this.

Regards,

Hubert Mireault