Create and test approval policies (vCAC) - Part 12

1. Create an Approval Policy
You assign an approval policy administrator to the tenant. The approval policy administrator creates
approval policies for use within the tenant when a user requests a virtual machine with more than
one virtual CPU (vCPU)
Login with Tenant-admin
https://vCACFQDN/shell-ui-app
Username = tenant-admin@vclass.local
Password = as assigned
Click the Administration tab. > Click the green plus sign next to Groups. > In the Add existing identity store groups to this grouptext box, type app. The text box populates with approval administrators. > Click Approval Administrators. > Select the Approval Administrator check box in the upper-right side of the window. > Click Add.

Login with approve-admin
https://vCACFQDN/shell-ui-app
Username = approve-admin@vclass.local
Password = as assigned
Click the Administration tab. > Click the green plus sign next to Approval Policies. > From the Policy Type drop-down menu, select Service Catalog - Catalog Item Request (Virtual Machine). > Click OK. > In the Name text box, type vCPU Approval. > In the Description text box, type Approval needed for virtual machines with more than one vCPU. > From the Status drop-down menu, select Active. > Click the green plus sign next to Levels. > In the Name text box, type More than one vCPU requested. > In the Description text box, type Any request for a virtual machine with more than one vCPU requires approval. > Under Is manual approval required, click Required based upon conditions. > From the Clause drop-down menu, select # CPUs. > From the Operator drop-down menu, select> (the greater-than sign). > In the Value text box, type 1. > In the Search box under Who are the Approvers, type bg. The search box autocompletes with matching users and groups. > Select BG-Admin@vclass.local. > Click Add. > Click Add. The vCPU Approval policy appears

Login with Tenant-admin
https://vCACFQDN/shell-ui-app
Username = tenant-admin@vclass.local
Password = as assigned
Click the Administration tab. > Click Catalog Management. > Click Entitlements. > Point to the Actions button on the right side of the window next to CentOS Entitlement.  > From the context menu, select Edit. > Click the Items & Approvals tab. > Under Entitled Catalog Items, select Modify Policy from the drop-down menu. > From the Apply this Policy drop-down menu, select vCPU Approval. > Click OK. > Click Update.

2. Test an Approval Policy
You submit a request from the catalog as a user. You verify that the request enters a pending state as
a business group administrator and reject the request.
Login with Bg-User
https://vCACFQDN/shell-ui-app
Username = bg-user@vclass.local
Password = as assigned
Click the Catalog tab. > In the CentOS Basic pane, click Request. > In the Request Information pane, change the number of CPUs to 2. > Click Submit. > Click OK. > Click the Requests tab. > Machine status should be pending for the approval > Point to the arrow in the Actions column for the most recent requests and select View Details
from the context menu. > Approver will be listed on the left side of the screen

Login with Bg-Admin
https://vCACFQDN/shell-ui-app
Username = bg-admin@vclass.local
Password = as assigned
In the My Inbox pane, verify that an approval is pending.
12. Click the Inbox tab.
13. Point to the arrow in the Actions column for the request. and select View Details from the
context menu. > In the Justification text box, type Application does not require 2 CPUs. > Click Reject. > Click Logout. > Log in with the catalog user name bg-user@vclass.local and password vmware1!. > Click the Requests tab. > Verify that the request was rejected.

3. Modify an Approval Policy
https://vCACFQDN/shell-ui-app
Username = approve-admin@vclass.local
Password = as assigned
Click the Administration tab. > Point to the down arrow under the Actions column for the CPU Approval policy and select Copy from the context menu. > In the Name text box, type CPU and Memory Approval. In the Description text box, type Approval needed for virtual machines with
more than one CPU and/or 512 MB memory > From the Status drop-down menu, select Active. > Point to the down arrow under the Actions column for More than one CPU Requested and
select Edit from the context menu > From the # CPUs drop-down menu, select Any of the following > From the Clause drop-down menu, select # CPUs. > From the Operator drop-down menu, select >= (the greater-than-or-equal-to sign). > In the Value text box, type 1. > Click Add expression. > From the Clause drop-down menu, select Memory (MB). > From the Operator drop-down box, select >=(greater-than-or-equal-to sign). > Click the Value drop-down-box and type 512. > In the Description text box, replace the text with Approval needed for virtual machines with more than one CPU and/or 512 MB memory. > Click Update. > Click Add.

Login with Tenant-admin
https://vCACFQDN/shell-ui-app
Username = tenant-admin@vclass.local
Password = as assigned
Click the Administration tab. > Click Catalog Management. > Click Entitlements. > Point to the Actions button on the right side of the window next to CentOS Entitlement and
select Edit from the context menu. > Click the Items & Approvals tab. > Under Entitled Catalog Items, select Modify Policy from the drop-down menu.  > From the Apply this Policy drop-down menu, select CPU and Memory Approval. > Click OK. > Click Update. The new policy is applied to the blueprint.