Need to have a security role which creates "Purchase request" without changing the approval status.
Approval status of "Purchase requests" are handled by a separate Data-Class "Request Status"
Separate read/write permissions can be set on this Dataclass to allow the change to be done by specific security roles.
1- Open Altiris Console, Settings, Security, Account Management
2- On the left pane, select "Roles"
3- On the right pane select the desired Security role to modify it's permission for purchase requests "Approval" Change.
4- Click "Show Security Role Manager Console"
5- on the lift upper pane select "All Dataclasses", then expand "Procurement Data Classes" and select "Request Status"
6- On the right buttom pane, click advanced, a new window will popup, select from the top the security role again.
7- Uncheck "Inhereit the permission entries from parent object ...", then click save and choose copy when prompted.
8- Now the Data-Class permissions are editable, to deny or permit, use "Read/Write Resource Data"
Subscribing will provide email updates when this Article is updated. Login is required.