7. Supervisor Approval

This feature enables supervisors to implement access policy for files uploaded using MetaDefender Vault.

Enabling supervisor approval feature


In order to enable Supervisor Approval feature please go to Supervisor Approval Global Settings. Note that guest can't be set as a supervisor

Set Supervisor stage approval process to:

  • One stage → One supervisor must approve uploaded files

  • Two stages → Two different supervisors must approve uploaded files (has been chosen from global setting), to turn this setting on, there is at least 2 supervisors prior from global configuration


Skipping supervisor approval process is possible for the following cases:

  • Never: default process, every file needs supervisor approval before being available for download

  • When sanitized: files that are sanitized will be automatically approved (do not require supervisor approval)

  • After time span: f iles will be automatically approved after the specified period of time elapses

images/download/attachments/5241130/image2019-10-16_13-59-24.png images/download/attachments/5241130/image2019-10-16_13-59-54.png

Configure supervisors

A user with the supervisor role can approve or revoke approval for files. Initially, the local administrator account is a global supervisor so he can approve or deny approval for all the files.

You can configure other supervisors by going to Supervisor ApprovalSetup Supervisor page.


Global config

From the global configuration menu you can select global supervisors. These users can supervise files for all the other users in the system.


Add or edit supervisors for each Organizational Unit

If you wish to configure one or more supervisors for each Organizational Unit you can do so by clicking Add / Edit when hovering over an Organizational Unit.


Each supervisor can only approve or reject files of his supervised users (in the same organizational unit). An organizational unit can have any number of supervisors, including none.

Learn how to include or exclude an organizational unit by going to User Filtering Configuration.

Assign supervisors dynamically by using an Active Directory filter

For both global supervisor and Organizational Unit supervisors you can choose to select supervisor by specifying an Active Directory filter. This way, users are promoted to supervisors whenever they match the specified filter.


Please note that for global configuration, the filter applies to all your Active Directories (if you have configured more than one).

Pending Approval Page

This page allows supervisors to manage files uploaded by the supervised users.


On the last column the following options are available:

  • Approve file: make the file available for download

  • Revoke approval: deny access to download the file

  • Retry processing (only visible in case of failures)

Approve or revoke multiple files at once

Supervisors can also approve or revoke multiple files at the same time, and not individually.


By selecting multiple files, the following actions will become available:

  • Approve

  • Revoke Approval

  • Delete

  • Download as archive

Two stage supervisor approval process

An uploaded file must be approved by two supervisors to be Available.

When a file is being Revoked by first or second supervisor the approval process will be restarted from scratch and two supervisors must approve the file again in order to be Available. If the file is being approved twice by the same supervisor, it won't be available. In order to be available two different supervisors must approve the file.

Approval History

You can use this page to check files that have been previously approved or denied approval.

If you wish to change your decision you can do so by using the actions menu in the last column.