Before Automating an Approval, Define What Yes Permits

Define who may approve which request version, what yes permits, and how changes, missing information, timeouts and repeat responses should be handled.

An approval button needs a sentence behind it: who may authorize exactly what, for which version of a request? Before an owner or operations lead automates a human decision, write that sentence. Otherwise, a faster response can still leave the team arguing about what was permitted.

If the handoffs are unclear, start with the workflow-mapping guide. This article focuses on one point inside that map: the meaning of an approval, not the route the whole job takes.

Name the authority and the subject

Separate the person collecting information from the person entitled to decide. Name the approving role, its limits, and an authorized substitute. If two people must agree, say whether both decisions are required or either person can decide alone.

Microsoft documents Power Automate options for first-response and all-approver decisions. Its everyone-must-approve example requires agreement from all assigned approvers, while one rejection rejects the request. Those are product behaviors, not a recommendation about who should hold authority in your business. See sources 1 and 2 below.

Give the decision a stable request reference and a specific version. For an illustrative job-scheduling request, identify the job, proposed date, scope, and supporting information. Avoid asking someone to approve a file whose contents can change without a new decision.

Write what yes permits, and what it does not

Try this decision statement: “The operations manager approves scheduling job J-104, version 3, for the stated date and scope. This does not approve a scope change or authorize sending the customer a new commitment.”

That is a proposed rule for discussion, not an implemented client system. Adapt it to your work. Distinguish permission to prepare something from permission to release it. Name the next permitted action, its owner, and any conditions still outstanding. An approval should not silently acquire extra powers as more automation is added.

Define completeness before asking for a decision. List the required details and attachments, and identify who checks them. If a request lacks a proposed date, returning it for information should not be recorded as approval or confused with rejection.

Decide what happens when there is no usable yes

  • Rejection: record the reason, notify the requester, and state whether revision or closure follows.
  • Missing information: identify what is needed, who supplies it, and when the request can return for review.
  • No response: choose a business deadline, a reminder owner, and an escalation route. Do not treat silence as permission.
  • Unavailable approver: define who may take over and how that substitution becomes visible. Escalation should not create authority by accident.

Separate your business deadline from a tool's waiting limit. Decide what a late answer means after escalation or closure, rather than allowing an old notification to reopen work unexpectedly.

Make changes and repeat responses unambiguous

List amendments that require a fresh decision: for example, a changed scope, date, destination, or supporting document. Specify whether a minor correction can preserve approval and who may classify it as minor. Keep the earlier decision attached to the earlier version; do not present it as approval of the amendment.

Ask the duplicate-response question in business terms: if someone clicks twice, or a completed action is retried, should the job be scheduled twice? The intended answer here is one scheduling action per valid decision. Developers call this concern idempotency. Ask for a demonstration, including what happens when one response says yes and a later response says no. Agree when a decision becomes final and how an authorized correction is recorded.

Choose a visible decision record

Specify where authorized staff can see the request version, decision-maker, response, time, reason, and resulting action. Decide who may view supporting material, respond, amend a request, or correct the record. A notification should point people to the agreed current status.

Microsoft notes that a Teams approval card does not automatically update after a response through email or the approval action center. That specific limitation illustrates why status visibility needs testing; it does not mean email can never contribute to an audit trail. See source 3 below.

Ask for five acceptance demonstrations

Use synthetic requests and these proposed expectations before accepting an automation:

  1. An authorized manager approves complete J-104 version 3: exactly one scheduling action follows, and the decision is visible.
  2. A request lacks its proposed date: it returns for information without scheduling or a recorded yes.
  3. The approver rejects: the reason reaches the requester and scheduling remains blocked.
  4. The deadline passes: the named escalation owner is notified; a late reply cannot silently override closure.
  5. Version 3 is approved, then its scope changes: version 4 needs review, and repeating version 3's response cannot schedule either version again.

These are workflow-design recommendations, not guarantees supplied by an approval product. Bring your decision statement and exceptions to a project discussion, without confidential records or credentials.

Primary sources

  1. Microsoft Learn: Get started with approvals
  2. Microsoft Learn: Create an approval flow that requires everyone to approve
  3. Microsoft Learn: Known issues with approvals
MORE RESEARCH