Set up a space for approvals

Letting people raise approvals ad hoc works right up until somebody asks you to prove the process exists. This is the order to do things in when you want a space that runs itself. It takes about twenty minutes.


1
Who reviews
2
The rules
3
Make it automatic
4
Lock it down
5
Reporting

Go to space settings, Capable Approval, Teams.

For one standing group, use the built-in Space team and add up to 16 people. For several groups, or to reuse reviewers across spaces, create named teams. To have membership follow a Confluence group, back the team with that group. See Manage approval teams.

Space Approval Settings on the Teams tab, listing the Space team, three unconfigured teams and an enabled global team
Every team available to this space is listed on the Teams tab, with its status on the right.

✓
Who reviews
2
The rules
3
Make it automatic
4
Lock it down
5
Reporting

Expand the team and turn on Enable approval team.

Setting

What to put

Minimum approvers

Whatever your written procedure says. Two of four is common.

Minimum rejections

Leave at 1 unless one objection should not block the page.

Expiry

Match your review cycle, typically 6 or 12 months. See Expiry and re-approval.

Publish on approval

On, if approved pages should go live automatically. See Publishing.


✓
Who reviews
✓
The rules
3
Make it automatic
4
Lock it down
5
Reporting

On the Automation tab, turn on page creation so nothing new can exist unapproved. Add page update as well if you want existing pages pulled into the process as people edit them.

Automation tab with Page creation and Page update turned on and the Space team chosen as the default team
Page creation and Page update both on, with the Space team picked as the default team.

If different documents need different reviewers, add label rules so a page labelled security goes to the security team. Full detail in Automatic approvals.

Route approvals by page label, with Page creation and Page update on and one label mapped to a global approval team
Each label mapping sends matching pages to its team. The first matching rule in the list wins.

✓
Who reviews
✓
The rules
✓
Make it automatic
4
Lock it down
5
Reporting

On Overrides, decide whether everyone may raise approvals. Turning off allow users to edit approvals restricts it to space administrators, and restrict who can edit approvals lets you name specific people and groups instead. See Who can do what.

Overrides tab with Approval expiry turned on and set to 1 Month, and Publish on approval turned on
Overrides set space-wide expiry and publishing defaults that win over team and per-approval settings.

On Security, turn on Require 2FA to approve if approvals need to count as signatures.

Security tab with toggles for Allow users to edit approvals, Restrict who can edit approvals and Require 2FA to approve
Require 2FA to approve is the last toggle on the Security tab.

✓
Who reviews
✓
The rules
✓
Make it automatic
✓
Lock it down
5
Reporting

On Watchers, add anyone who should hear about every outcome without being a reviewer, such as a compliance lead.

Watchers tab with an Add users button and one watcher added
Use Add users to pick watchers. They are notified whenever approvals in this space are created, updated or completed.

Then build a saved search of everything expiring in the next month and put it on the agenda of whatever meeting owns this process. That one habit is what turns configuration into an actual control. See Search and reporting.

Finally, on Banner, decide whether pages here show an approval strip at the top.

Banner tab with Follow the site setting selected, plus Show in this space and Hide in this space
Follow the site setting, or always show or always hide the banner in this space.

Setting

Controlled space

Ordinary team space

Automatic on page creation

ONOFF

Expiry

6 or 12 months

None

Require 2FA

ONOFF

Restrict who can raise

On, quality team only

Off

Banner

On

Follow the site


#A few things that catch people out

  • Enabling the team is the step people skip, and everything downstream depends on it.

  • Automation with a team that has no members does nothing, silently.

  • Requiring codes changes how people answer. Warn them first.

  • Overrides beat both the team and the individual page. Check them when something surprises you. See Space settings.



That is a controlled space, running itself. Go and put the kettle on.