> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions/exception-approver-admin-permissions.md).

# Exception Approver Admin permissions

**Exception Approver Admin permissions**

Controls access to the **Exception Management** section on the **Server Settings** page, located at **Settings** → **Configurations** → **General** → **Server Settings**.

This permission governs who can configure the exception approval workflow, specifically, whether exceptions require approval, and managing the list of designated approvers.

{% hint style="warning" %}

### Caution

Users also need **General Configuration** View permission to view or View/Edit **Exception Management** in **Server Settings**.
{% endhint %}

| Permission | Description                                                                                                                                                                       | Roles Example                                                                                                                                                                   |
| ---------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| None       | No access to the **Exception Management** section on the **Server Settings** page. Users cannot view or modify the approval workflow configuration and the list of approvers.     | SOC Tier 1 and Tier Analysts: No need for visibility into approval workflow configuration.                                                                                      |
| View       | The **Exception Management** section is visible on the **Server Settings** page. Users can view the approval configuration workflow and the list of approvers (names and emails). | SOC Tier 3 Analyst and Threat Hunter: Can view the approval workflow to understand the exception approval process and whether the exceptions they encounter have been approved. |
| View/Edit  | Read and write access to the **Exception Management** section on the **Server Settings** page. Users can configure the exception approval workflow and manage approvers.          | Security Engineer: Full access to toggle approval requirements and manage the approvers list.                                                                                   |

**Required and recommended permissions**

Consider adding the following permissions:

| Permissions                | Permission Level  | Reason                                                                                                                                                                                                                                                                                                                                                  |
| -------------------------- | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| General Configuration      | View or View/Edit | <ul><li>View: The <strong>Exception Management</strong> section is on the <strong>Server Settings</strong> page. Without this permission, users cannot view the section. Required.</li><li>View/Edit: Users who configure exception approval workflows may also need to manage other server settings (email contacts, Google Maps key, etc.).</li></ul> |
| Issue Exclusion            | View              | Approver administrators should understand the exclusion/exception rules they are configuring for approval workflows. Without this, they are configuring approval settings without visibility into the rules being approved. Strongly recommended.                                                                                                       |
| Exception Management Admin | View              | Understanding the exception rules that will go through the approval workflow helps configure appropriate approvers and approval requirements. Strongly recommended.                                                                                                                                                                                     |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-xsiam/reference-and-developer-docs/role-based-access-control/exceptions-configuration-permissions/exception-approver-admin-permissions.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.