Approvals
Every change Garrison proposes waits here: firewall and WAF rules, containment, role setup, onboarding, model changes on the appliance. Nothing runs until a person approves the exact change shown.
| Tab | Holds |
|---|---|
| Awaiting decision | Changes waiting for you. The number also shows in the menu |
| In progress | Approved changes that are running |
| Done | Everything decided, with its outcome |
An approval
Section titled “An approval”Each card shows:
- What and where: the title, the target (a system, a device, the OAF cluster) and the risk (moderate, dangerous).
- The exact change: the commands, the rule, or a diff of the configuration.
- Progress: Proposed → Approved → Executed → Verified. Garrison checks the result after running it (for example, reads the firewall back) and marks it Verified or Failed.
- Who and when: who asked, who decided, and the note they left.
Approve or reject with an optional note; the note is kept in the audit log.
Who can approve
Section titled “Who can approve”Admins can approve anything. Standard users approve their own requests and changes to the integration types an admin has granted them.
Changes Garry proposes in a chat appear in that conversation too, and can be approved there.