Who says yes to a hand-over and who answers in an access review is set by an Organisation Admin. You name a space's approver and reviewer on its page under Spaces, mark a master key on its page under Access Credentials, and name an owner on a locking system's card.
Also called: authoriser, sign-off, operator, recertifier.
What you name is always a person or a people group. Only someone with an active login linked to their person record can decide or answer. With a group, any member with a login can decide. When approval is needed is on When access needs approval.
A space whose protection need is Very high shows the line Approver under its name on its page, with Can decide: and the names. A space with a lower protection need does not show the line.
Open the space under Spaces.
On the Approver line, choose Edit.
Choose Add Approver, or Change when someone is already named.
Search under People or People groups and pick a person or a group.
When nobody is named, it reads None named with Responsible and Deputies decide: the space's responsible person and their deputies then decide (Name who is responsible for a place). When nobody can decide, it reads Nobody can decide, requests wait.
Remove takes the approver off. The Responsible and Deputies then decide.
An approver once named on a building or location shows there as "Approver named here". It can be removed, not changed; approvers are named on spaces.
Every space shows the line Reviewer on its page. The reviewer answers the space's rows in an access review (Access reviews: what they are and how they run).
Open the space under Spaces.
On the Reviewer line, choose Edit.
Choose Add Reviewer, or Change, and pick a person or a people group.
When nobody is named, the Responsible and Deputies answer the review rows. Remove takes the reviewer off.
A marked master key is handed over only after the owner of its locking system says yes.
Open the key under Access Credentials, Overview tab.
On the card Approval before handover, choose Mark for Approval.
The card says under Holding it who can decide, and lists the spaces with protection need Very high that the key opens, with their approver. Remove Mark takes the mark off. A request already raised still waits, and is decided as it was raised.
The owner decides who may hold a marked master key of the system. The owner is named on the locking system, never on a key. The line Owner sits on the card of every mechanical locking system: on a building's Locking System page (Read your locking plan) and in the summary of the import connection under Integrations.
On the Owner line, choose Add Owner, or Change.
Under Owner of this locking system, pick a person or a people group.
Remove takes the owner off. A marked master key of this system then waits for approval until someone is named again.
When a waiting request moves to an approver after a naming, and who is emailed then, is on When access needs approval.
When an access review starts, the reviewer and the Responsible and Deputies answer the space's rows.
Every naming is written to the Audit Log.
Only an Organisation Admin names, changes and removes. Other roles see the lines; Edit is greyed for them.
An approver is named on a space, not on a building or location.
The approver line shows only on spaces whose protection need is Very high.
Only a key of a mechanical system whose confirmed class is master, grand master or great grand master can be marked.
Someone with no login, or who has left, can neither decide nor answer. A person who cannot decide is refused as approver.
A people group filled from a source, such as the HR file or Entra ID, cannot be named approver, reviewer or owner. Name a group kept by hand.
