Skip to content

The destination needs an approval

Code: egress.needs_approval

The policy allows the destination only once someone approves it.

Awake’s answer says:

the box's egress policy allows this destination only with an approval

Every request a box sends leaves through the Egress Proxy, outside the box, which allows only what your org’s policy names and refuses the rest. The Egress Proxy says more.

Ask for it in Requests. The answer names who approves it.

In the console: Requests.

Ask for it in Requests. The answer’s approver names who approves it: you, for your own box, where your org lets members allow some sites, or your org’s admins. Once it’s approved, try again.

Admins approve requests in Admin → Requests. An Org admin can also allow the destination for everyone in Admin → Policies → Destinations.

Tell the person what was refused and why, with this code, and don’t retry in a loop. Don’t try another host, encoding or route to get around a control.

The Egress Proxy records each refusal, never the request’s data. Org admins and security auditors read the records in the Audit log.

Ask your Awake admin. Give them the code, egress.needs_approval, and when it happened.