Skip to content

Approve, reject or cancel a quorum request

Decide an operation that waits for quorum approval in your tenant, or withdraw one you asked for yourself.

Who can do it

A tenant administrator or a tenant key manager. Approving and rejecting need the permission to approve; withdrawing needs the permission to cancel, and only on your own request.

  • You are never offered Approve or Reject on a request you made. Another approver decides it.
  • Withdraw is offered only on your own request, while it is pending.
  • Nobody decides a request while acting in the tenant under support access.

Before you start

  • Quorum approval is on in your tenant, and a request is Pending.
  • Read what the request would do: the operation, its target, who asked for it and what they sent. The approval that reaches the quorum runs the operation as the person who asked for it.

Steps

  1. Open Policies and, on the Quorum approval card, select Open quorum approval. A link such as Open the quorum request on another screen opens the request directly.
  2. In Requests, the list opens on Pending. Each row shows the Operation and its target, Requested by, Approvals, Status and Expires. Select All or another status to see other requests.
  3. Decide the request:
    • Approve counts your approval.
    • Reject ends the request. One rejection is enough.
    • Withdraw, on your own request, ends it without anything running.

The console may ask you to confirm who you are before an approval or a rejection: Confirm your identity to continue opens with your own sign-in steps, and your decision is sent once you confirm.

What you see when it worked

  • An approval shows Approval recorded with the request's status. While approvals are missing it stays Pending; the approval that reaches the quorum runs the operation, and the request reads Executed.
  • A rejection shows Request rejected, and the request reads Rejected.
  • A withdrawal shows Request withdrawn, and the request reads Cancelled.

If the operation refuses to run when the quorum is reached, the request reads Failed and shows the reason; your approval is kept. A request nobody decides in time reads Expired.

If it fails

What you see Cause What to do
Your request: another approver decides it. and no Approve You made the request Another eligible approver decides it
The decision is refused because you are not an eligible approver You are not an active member holding the permission to approve Ask an eligible approver
The decision is refused because the request is no longer pending It was decided, withdrawn or expired meanwhile Reload the list
The decision is refused because you already decided it An approver decides once Nothing to do
The withdrawal is refused Only the requester may withdraw a request Reject it instead, if you are an approver
The request reads Failed The operation refused to run when the quorum was reached Read the reason, correct the cause and ask again

Without the console

Surface How
Key management CLI ankasecure-km quorum-requests cancel --id <uuid> withdraws a request the workload made. Approving and rejecting have no command
Admin SDK QuorumRequestOperations.cancel(UUID), from AuthenticatedKeyManagementSdk.quorumRequests(), withdraws a request the workload made. Approving and rejecting are not available
API POST /api/v3/admin/tenants/{tenantId}/quorum/requests/{requestId}/approve (operation approveTenantQuorumRequest); POST /api/v3/admin/tenants/{tenantId}/quorum/requests/{requestId}/reject (operation rejectTenantQuorumRequest); POST /api/v3/admin/tenants/{tenantId}/quorum/requests/{requestId}/cancel (operation cancelTenantQuorumRequest)