Approvals

Bulk approvals controls second-approver policy for bulk Active Directory writes.

Configure a policy

1. Open Settings, Bulk approvals.
2. Review each bulk action.
3. Turn dual approval on or off where the control is available.
4. Set the bulk-count threshold.
5. Add a skip-approval exception only when it is available and appropriate.
6. Select Save changes.

The page covers bulk disable, enable, unlock, force password change, password-never-expires changes, password resets, deletion, and moves between OUs.

What this does not do

Some actions have a locked second-approver policy that cannot be weakened. Changes that weaken protection ask for the organisation name and can be scheduled. This setting applies to qualifying bulk actions, not every single-account action.