When an O&M engineer attempts to run a command listed in the Command Approval field of a control policy, Bastionhost notifies you to review the request. The command runs only after you approve it.
Prerequisites
Before you begin, ensure that you have:
Configured a control policy with the Command Approval field set. For details, see Configure a control policy
An O&M engineer who has attempted to run the controlled command on a host

Access the approval page
Log on to the Bastionhost console. In the top navigation bar, select the region where your bastion host resides.
In the bastion host list, find the target bastion host and click Manage.
In the left-side navigation pane, choose Approval.
Approve or reject a command
Choose To-do List.
On the Command Approval tab, find the pending request.
Find the command to review and click Allow or Reject in the Actions column.
View command review history
Choose Handled Items.
On the Command Approval tab, view the review history.