In vRA, approval policies adds the ability to interrupt an automated deployment by requiring manual interaction to decide whether a specific service should be deployed. The policies are applied to items in an entitlement. You can apply them to services, catalog items, catalog item components, or actions that require an approver to approve or reject a provisioning request. When a service catalog user requests an item that includes one or more approval policies, the approval request is sent to the approvers. If approved, the request moves forward. If rejected, the request is canceled and the service catalog user is notified regarding the rejection.
In his post we will go through a simple example of how approvals are used in vRA.
The scenario: The dev team has access to the blueprints below, they have been spinning up VMs all over the place so I would like to approve or deny all their requests going forward.
Navigate to Administration > Approval Policies > Click on the plus sign to add a policy
Choose select an approval policy type and composite blueprint
Choose a name for the policy and mark it as active
Notice that you can set a pre-approval (before the workload is deployed) or a post approval (After the workload is deployed). In my example, I am going to use a pre-approval.
Note: I have set that the approval to be always required and that I am the approval. Let’s now navigate to Administration > Catalog Management > Entitlements. I am going to edit my dev team entitlements. Click on Items & Approvals.
Add the newly created approval policy to the relevant entitled items.
We are all set. Let’s try this out. I am going to log in as a user from my dev team and request a blueprint.
My request is pending approval.
I am now going to log in as a tenant admin to approve this request.
The approval request is pending in my inbox, let’s approve it!
Once approved, I am going to log back in as my dev user.
The workload is now deploying (:
I hope this post was helpful. Thank you for reading.
How useful was this post?
Click on a star to rate it!
Average rating / 5. Vote count:
My name is Amine El Badaoui and I currently live in Aylesbury, a small town in the south east of England
I have been working in the IT industry for few years now and specialise in VMware virtualisation, data centre infrastructure and cloud technologies. Over the years I have obtained numerous industry certifications from Microsoft, Netapp and VMware.I currently work as a VMware Product Engineer @ https://www.rackspace.com/
This blog represents my random technical notes and thoughts. The thoughts expressed here do not reflect my current employer in anyway.