Office365 Privileged Access Approval Process if requester is in approvers group

[Aharon Fridman]

Hello,

While reading about Office 365 Privileged Access Management feature, a question came up in mind:

Given there is a role A that requires approval, utilizing the privileged access management of Office 365.  Given there is a user Joe that is in the approves group, Joe does not have role A and Joe wants role A. 

Could Joe request the role and be his own approver? I would expect that a second entity would be required for approval, however given this scenario, could Joe just approve the request for him self?

Thank you for your help!

Aharon

[#2]

PAM doesn't allow someone who requests elevated access to approve their own request. Approval must come from someone else who is a member of the designated approval group.

[#3]

Hi Tony and thanks for your reply!

What if the requester is a member of the designated approval group? Can he approve himself in this case?

thanks,

Aharon