Approvals

Approvals in Wallet-as-a-Service (Palisade) add human review to transactions and sensitive organization changes. When an approval group applies to an action, the action remains pending until enough approvers authorize it in the Wallet-as-a-Service (Palisade) web console or mobile app.

Approvers are organized within approval groups. Most approval groups use selected users as approvers. The Approval groups approval type uses active organization owners as approvers and protects changes to approval groups themselves.

1. Go to the Controls section of the Wallet-as-a-Service (Palisade) console and select the Approvals tab.

2. Select Create approval group.

3. Select the entity that this approval group applies to:

   • Addresses
   • API credentials
   • Approval groups
   • Devices
   • Policy rules
   • Transactions
   • Users

4. Select one or more users from your organization to become approvers.

   • Users with the correct permissions can approve requests.
   • You can select any number of approvers.
   • For Approval groups, Palisade uses active organization owners as approvers. You configure the threshold and timeout, but you do not select individual approvers.

5. Set the approval timeout.

   Set the time window approvers have to review and approve requests before they time out. The timeout applies to all approval requests for this group. If approvers do not submit enough approvals within the configured timeout, Palisade automatically rejects the approval.

6. Set the minimum number of required approvers per request.

   • You can require every user in the approval group, but we recommend majority approval to account for user availability.
   • Example: If an approval group has three approvers, set the number of required approvers to two.

7. Select Create.

Each approval type can have one default approval group. By default, transaction approval groups apply to all wallets. To override the default approval group for a wallet, go to the wallet's Approvers tab and select Update approval group. You can select one of these options:

1. Do not use an approval group - No approvals apply to transactions from this wallet.
2. Use default approval group - The wallet uses the organization-level transaction approval group.
3. Use a custom list of approvers for this wallet - The wallet uses wallet-specific approvers and threshold settings.

If your organization uses an Approval groups approval group, changes to wallet-level transaction approval group overrides require active owner approval before they take effect.

Create an approval group with Approval groups as the approval type to require active owner approval before approval group changes take effect.

Create this approval group first if you want active owners to approve later approval group setup. The first Approval groups approval group turns on this requirement.

To configure this requirement:

1. Go to the Controls section of the Wallet-as-a-Service (Palisade) console and select the Approvals tab.
2. Select Create approval group.
3. Under Type of approval, select Approval groups.
4. Under Threshold, select the minimum number of active owners who must approve approval group changes.
5. Under Approval timeout, select how long owners have to respond.
6. Select Create.

After you create this approval group, these changes create a pending approval request:

• Creating an organization-level approval group
• Updating an organization-level approval group
• Deleting an organization-level approval group
• Changing a wallet-level transaction approval group override

Palisade applies the requested change only after enough active owners approve it. If you update or delete the Approval groups approval group itself later, active owners must approve that change too. If an owner rejects the request or the request expires, Palisade leaves the existing approval group configuration unchanged.

You can see pending approval group changes in the approval groups table. Pending changes can show Pending creation, Pending update, or Pending deletion status. You cannot submit another change for the same approval group until the pending request completes, expires, or an owner rejects it.

For governance recommendations and active owner planning, see Configure approval flows.

The Approvals page lists approval groups in a table.

1. Select the approval group that you want to update.
2. Add or remove approvers, or change the minimum number of required approvers.

You cannot change the approval type. To change the type, delete the approval group and create a new one.

If your organization uses an Approval groups approval group, updates remain pending until enough active owners approve them.

Open the Actions menu and select Delete.

If your organization uses an Approval groups approval group, deletion remains pending until enough active owners approve it. To turn off approval requirements for approval group changes, delete the Approval groups approval group. Active owners must also approve that deletion.

Palisade notifies approvers of proposed actions in the Wallet-as-a-Service (Palisade) web application and on their registered device if they have one.

An approval remains pending until approvers meet the required threshold within the configured timeout window. The default timeout is 1 hour. If approvers do not meet the threshold within the timeout period, Palisade automatically rejects the approval.