Introducing more granular controls for multi-party approvals for sensitive admin actions

Last year, we introduced multi-party approval (MPA), a security feature that requires an admin to approve certain sensitive actions initiated by another admin. Today, we’re enhancing this feature by giving admins more granular controls, specifically:

Admins

Multi-party approval adds an extra layer of security for sensitive actions taken in the admin console by ensuring sensitive actions are not implemented in a silo and, more importantly, helps prevent unauthorized or accidental changes from being made.

We understand each customer has their own unique definition of security and what constitutes a high-risk action. By introducing more granular controls, we’re giving our customers the authority to decide what features should be subject to multi-party approvals and who has the authority to review these actions, in a way that works best for them, rather than the experience being “all or nothing”.

To further strengthen security around sensitive actions, admins now require both 'reviewer' and 'requester' privileges for a given action to conduct its MPA review. This ensures that the approving admin possesses the direct authority to perform the action themselves, reinforcing the integrity of the approval process and preventing approvals from individuals with inadequate underlying permissions.