在 Azure AD 權利管理中核准或拒絕存取要求Approve or deny access requests in Azure AD entitlement management

您可以使用 Azure AD 權利管理來設定原則,以要求存取套件的核准,然後選擇一或多個核准者。With Azure AD entitlement management, you can configure policies to require approval for access packages, and choose one or more approvers. 本文說明指定的核准者可以如何核准或拒絕存取套件的要求。This article describes how designated approvers can approve or deny requests for access packages.

開啟要求Open request

核准或拒絕存取要求的第一個步驟是尋找並開啟待核准的存取要求。The first step to approve or deny access requests is to find and open the access request pending approval. 有兩種方式可開啟存取要求。There are two ways to open the access request.

先決條件角色: 人員Prerequisite role: Approver

  1. 尋找要求您核准或拒絕要求的 Microsoft Azure 電子郵件。Look for an email from Microsoft Azure that asks you to approve or deny a request. 以下是範例電子郵件:Here is an example email:

    核准存取套件電子郵件的要求

  2. 按一下 [ 核准或拒絕要求 ] 連結以開啟存取要求。Click the Approve or deny request link to open the access request.

  3. 登入我的存取權入口網站。Sign in to the My Access portal.

如果您沒有電子郵件,可以依照下列步驟,找到等待您核准的存取要求。If you don't have the email, you can find the access requests pending your approval by following these steps.

  1. 登入我的存取權入口網站 https://myaccess.microsoft.comSign in to the My Access portal at https://myaccess.microsoft.com. 適用于美國政府的 (,我的存取權入口網站連結中的網域將會是 myaccess.microsoft.us 。 ) (For US Government, the domain in the My Access portal link will be myaccess.microsoft.us.)

  2. 在左側功能表中,按一下 [ 核准 ] 以查看正在等待核准的存取要求清單。In the left menu, click Approvals to see a list of access requests pending approval.

  3. 在 [ 擱置 中] 索引標籤上,尋找要求。On the Pending tab, find the request.

(Preview 查看要求者對問題的解答) View requestor's answers to questions (Preview)

  1. 流覽至我的存取權中的 [ 核准 ] 索引標籤。Navigate to the Approvals tab in My Access.

  2. 移至您想要核准的要求,然後按一下 [ 詳細資料]。Go to the request you'd like to approve and click details. 如果您已準備好進行決策,您也可以按一下 [ 核准 ] 或 [ 拒絕 ]。You can also click Approve or Deny if you are ready to make a decision.

  3. 按一下 [ 要求詳細資料]。Click on Request details.

    我的存取權入口網站-存取要求-按一下要求詳細資料

  4. 要求者提供的資訊將位於面板底部。The information provided by the requestor will be at the bottom of the panel.

    螢幕擷取畫面顯示要求的詳細資料

  5. 根據要求者提供的資訊,您可以接著核准或拒絕要求。Based on the information the requestor provided, you can then approve or deny the request. 請參閱核准或拒絕要求指引中的步驟。See the steps in Approve or deny request for guidance.

核准或拒絕要求Approve or deny request

在您開啟等待核准的存取要求之後,您可以看到可協助您進行核准或拒絕決策的詳細資料。After you open an access request pending approval, you can see details that will help you make an approve or deny decision.

先決條件角色: 人員Prerequisite role: Approver

  1. 按一下 [檢視] 連結以開啟 [存取要求] 窗格。Click the View link to open the Access request pane.

  2. 按一下 [ 詳細資料 ] 以查看存取要求的詳細資料。Click Details to see details about the access request.

    這些詳細資料包括使用者的名稱、組織、存取開始和結束日期(如有提供)、商務理由、提交要求的時間,以及要求將到期的時間。The details include the user's name, organization, access start and end date if provided, business justification, when the request was submitted, and when the request will expire.

  3. 按一下 [ 核准 ] 或 [ 拒絕]。Click Approve or Deny.

  4. 如有必要,請輸入原因。If necessary, enter a reason.

    螢幕擷取畫面顯示您接受或拒絕要求的頁面。

  5. 按一下 [提交] 以提交您的決定。Click Submit to submit your decision.

    如果原則設定有多個核准者,只有一位核准者需要決定待核准。If a policy is configured with multiple approvers, only one approver needs to make a decision about the pending approval. 核准者提交其對存取要求的決策之後,要求便會完成,而且其他核准者也無法再核准或拒絕要求。After an approver has submitted their decision to the access request, the request is completed and is no longer available for the other approvers to approve or deny the request. 其他核准者可以在其我的存取權入口網站中查看要求決策和決策 maker。The other approvers can see the request decision and the decision maker in their My Access portal. 目前只支援單一階段核准。At this time, only single-stage approval is supported.

    如果未設定的核准者都無法核准或拒絕存取要求,則要求會在設定的要求持續時間之後過期。If none of the configured approvers are able to approve or deny the access request, the request expires after the configured request duration. 使用者會收到其存取要求已過期,且需要重新提交存取要求的通知。The user gets notified that their access request has expired and that they need to resubmit the access request.

下一步Next steps