...
| Table of Contents | ||||
|---|---|---|---|---|
|
Creating
...
an Approval Group
There must be three fully joined members of your organization to be able to create an Approval Group; three is the minimum number required to create an Approval Group.
Approval Groups can also consist of more than three people.
...
You will receive a notification that the group has been created.
...
Activities
...
an Approval Group Can Be Assigned To
The three activities in a PreVeil organization that an Approval Group can be assigned to are:
Admin Management
The purpose of this activity is to add a layer of security in the Admin console. Assigning a group to this activity will make it so that any activity an administrator wishes to undertake in the Admin console will require group approval.
If no group is assigned to this activity, a single administrator will have full functionality in the Admin console, and can perform any action without the need for approval.
The Approval Group assigned to this activity must consist of entirely admin level users, as a standard level user will not have access to the Admin console functionality.
Data Export
Data Export allows an administrator within your organization to download a decrypted copy of any data for any user within your organization.
The Approval Group assigned to this activity can consist of admin level users, standard level users, or a mix of the two.
Account Recovery
The account recovery Approval Group (also known as the Recovery Group) is a group of users within your organization that can assist a user in recovering access to their PreVeil account.
PreVeil doesn’t utilize user names and passwords for account recovery. Instead, what allows a user to access their PreVeil account is an encryption key that gets generated on a user’s device when they create their PreVeil account.
Assigning a Recovery Group to a user in your organization will provide each member of the group with a shard of the user’s encryption key. When invoked, the Recovery Group has the ability to rebuild a user’s key on their device, thereby allowing the user to re-access their account.
This is the primary method to protect a user’s account access, as PreVeil does not have access to any of our user’s encryption keys, so we cannot restore these keys for you. As such, the responsibility of making sure this recovery method is available to your users will fall upon the administrators of a PreVeil organization creating and assigning a Recovery Group for their users.
The Recovery Group can consist of admin level users, standard level users, or a mix of the two.
Assigning
...
an Approval Group
Depending on the activity you are assigning a group to, there are two different methods for doing so.
...
| Info |
|---|
Note: The user’s computer needs to be online for the Recovery Group to be successfully assigned. If the user’s device is not online, the Recovery Group will not be assigned to the user’s account. |
Copying
...
an Approval Group
To make a copy of an existing group:
...
You will receive a notification that the new group has been created.
...
Replacing
...
an Approval Group
An existing Approval Group cannot be modified to add or remove users, but it can be replaced if needed. To replace an Approval Group assigned to an activity:
Create a new Approval Group using the steps in the Creating An Approval Group section above.
Assign the new Approval Group to the activity using the steps in the Assigning An Approval Group section above.
The outgoing Approval Group will need to approve this replacement action before the new group will be assigned to the activity.
Deleting
...
an Approval Group
To delete an Approval Group:
...