Approval request for configuration compliance not triggering

[Maloy Banerjee1]

Hi Team,

I have a requirement to trigger approval request for false positive of Configuration Compliance remediation task.

The approval should be triggered to group abc. Now, for configuration compliance false positive the prerequisite is that the approver should have sn_vulc.false_positive_approver role which some members of the group are getting from a different group xyz.

The below is OOB script structure of False positive approver for remediation tasks in Approver level (sn_sec_cmn_approver_level) table.

var result = setUserAndGroup(recordGr);
users = result.users;
groups = result.groups;
/**
  * This function serves to return a list of approver users and groups.
  * The Remediation Task record provided in the change approval request is added as the input parameter to this script. 
  * The function should return an object containing comma separated sys_ids for users and groups with role sn_vulc.false_positive_approver.
  */
function setUserAndGroup(recordGr) { 
    // Add any logic here to construct your script as necessary.
     return {
        users: "",
        groups: ""
    };
}

Can you please help me how to trigger approval request using the above script to the members of the group abc?

Regards,

Maloy

[jcmings]

Can you accomplish this in Flow Designer?

[Maloy Banerjee1]

Unfortunately no. I have to use Approval rules of Configuration Compliance.