windows-itpro-docs/mdop/agpm/performing-approver-tasks.md

title, description, author, ms.assetid, ms.pagetype, ms.mktglfcycl, ms.sitesec, ms.prod, ms.date

title	description	author	ms.assetid	ms.pagetype	ms.mktglfcycl	ms.sitesec	ms.prod	ms.date
Performing Approver Tasks	Performing Approver Tasks	jamiejdt	6f6310b3-19c1-47c9-8615-964ddd10ce14	mdop	manage	library	w10	06/16/2016

Performing Approver Tasks

An Approver is a person authorized by an AGPM Administrator (Full Control) to create, deploy, and delete Group Policy objects (GPOs) and to approve or reject requests (typically from Editors) to create, deploy, or delete GPOs.

Important   Ensure that you are connecting to the central archive for GPOs. For more information, see Configure the AGPM Server Connection.

 

• Approve or Reject a Pending Action

• Creating, Controlling, or Importing a GPO

• Check In a GPO

• Deploy a GPO

• Roll Back to a Previous Version of a GPO

• Deleting, Restoring, or Destroying a GPO

Note   Because the Approver role includes the permissions for the Reviewer role, an Approver can also review settings and compare GPOs. See Performing Reviewer Tasks for more information.

 

Additional considerations

By default, the following permissions are provided for the Approver role:

• List Contents

• Read Settings

• Create GPO

• Deploy GPO

• Delete GPO

Also, an Approver has full control over GPOs that he created or controlled.