On pe, 17 tammi 2020, Daniel PC via FreeIPA-users wrote:

Hi all,

Does anyone know if it is possible to implement an approval workflow to enable a user to access a host? My idea is, for a limited number of users, allow access only after receiving OK from a responsible.

There is no way to achieve it with FreeIPA as it is.

FreeIPA 4.8.4 adds support for member managers (users that are allowed to add other members of a group). You can build on top of that but you'd need to provide own app that would do so.