Device Approve Commands

Approve Cloud SSO Devices.

Usage:

device-approve [--options] [device ...]

Parameters:

User's email or device ID to approve or blank to see a list of pending devices

Dotnet CLI

Usage:

enterprise-device [options] [command] [match]

Aliases: ed

Sub Commands:

• list - List device approval requests (default)

• approve - Approve device(s)

• decline - Decline device(s)

Options:

• -f, --force - Force reload enterprise data

• --auto-approve <true|false> - Set auto-approve policy

Match Patterns:

• all - Match all pending requests

• email - User email address

• device-id - Specific device ID

Example:

# List pending device approvals
enterprise-device list
ed list

# Approve devices
enterprise-device approve [email protected]
ed approve all
enterprise-device approve abc123deviceid

# Decline devices
enterprise-device decline [email protected]
ed decline all

# Set auto-approve policy
enterprise-device --auto-approve true

DotNet SDK

Function: DeviceApprovalRequests

  public IEnumerable<DeviceRequestForAdminApproval> DeviceApprovalRequests => _deviceApprovals.Entities;

Example:

var devices = DeviceApproval.DeviceApprovalRequests

PowerCommander

Command: Not Implemented

Python CLI

Command: device-aprove [--option]

Parameter:

device - User email or device ID (optional, can be repeated)

Options

• -r, --reload - Reload list of pending approval requests

• -a, --approve - Approve user devices

• -d, --deny - Deny user devices

• --trusted-ip - Approve only devices coming from a trusted IP address

• --format - Output format: json, table, csv

• --output - Output filename

Example:

device-approve --approve [email protected]
device-approve --approve --trusted-ip 

Python SDK

Function:

approval_requests: List[DeviceApprovalRequest] = list(enterprise_data.device_approval_requests.get_all_entities())

approve_rq = enterprise_pb2.ApproveUserDevicesRequest()
approve_rq.deviceRequests.extend(device_requests)
KeeperAuth.execute_auth_rest(APPROVE_USER_DEVICES_ENDPOINT, approve_rq, 
                                response_type=enterprise_pb2.ApproveUserDevicesResponse)