When you apply approval policies to actions that can run on various components in a composite blueprint, the approval process varies depending on how the entitlement is configured and how the approval policies are applied.

This example uses specific details to build the blueprint and then apply approval policies to actions that you can run from the service catalog on the provisioned blueprint in different entitlements. The blueprint is a composite blueprint that includes another blueprint. The actions used are to destroy the provisioned items, destroy a deployment for the blueprints and destroy a virtual machine for the machine. The resulting behavior includes what is destroyed and when the applied approval policies trigger approval requests.

Example Blueprint

In this example, you configure a blueprint that includes a nested blueprint with a virtual machine.

  • Blueprint 1 - Continuous Integration Blueprint

    • Blueprint 2 - Pre-Production Blueprint

      • Virtual Machine 1 - TestAsAService vSphere VM

Approval Policies for Destroy Actions

You configure the two approval policies to destroy provisioned items. A Destroy - Deployment action can run on Blueprint 1 or Blueprint 2 in this example. A Destroy - Virtual machine action can run on Virtual Machine 1. You create the approval policies so that you can apply them to the actions in the entitlement.

Approval Policy Name

Approval Policy Type

Approval Policy A

Service Catalog - Resource Action Request - Destroy - Deployment

Approval Policy B

Service Catalog - Resource Action Request - Destroy - Virtual Machine

Entitlements and Approval Policies Applied to Actions

You configure three entitlements. Each entitlement includes the composite blueprint. In each entitlement, you add the destroy actions and apply the approval policies.

Entitlement Name

Entitled Action on Provisioned Machine

Applied Approval Policy

Entitlement 1

Destroy - Deployment

Approval Policy A

Entitlement 2

Destroy - Virtual Machine

Approval Policy B

Entitlement 3

Destroy - Deployment

Destroy - Virtual Machine

Approval Policy A

Approval Policy B

User Actions in the Service Catalog

When the service catalog user runs the action, blueprints or machines are destroyed depending on which item your user ran the action.

User Action in the Service Catalog

Selected Action

Destroyed Blueprints or Machines

Action 1

Destroy - Deployment action runs on Blueprint 1 - Continuous Integration Blueprint

Blueprint 1, Blueprint 2, and Virtual Machine 1

Action 2

Destroy - Deployment action runs on the nested Blueprint 2 - Pre-production Blueprint

Blueprint 2 and Virtual Machine 1

Action 3

Destroy - Virtual Machine action runs on the machine that is inside a deployment, Virtual Machine 1 - TestAsAService vSphere VM

Virtual Machine 1

Approval Policies Applied to Actions in the Entitlements

You apply the approval policies, the approvers receive an approval request depending on the blueprint or machine on which your service catalog user ran the action.

Entitlement Name

Approval Policy on Actions

User Action

Approval Request Triggered

If Approved, Destroyed Blueprints or Machines

Entitlement 1 - Destroy Deployment Approval Policy

Policy A (Destroy Deployment Approval Policy) on Destroy - Deployment action only

Action 1 (Run Destroy - Deployment action on Blueprint 1)

Approval requests are triggered for Blueprint 1 only

Blueprint 1, Blueprint 2, and Virtual Machine 1

Action 2 (Run Destroy - Deployment action on the Blueprint 2)

Approval requests are triggered for Blueprint 2 only

Blueprint 2 and Virtual Machine 1

Action 3 (Destroy - Virtual Machine action runs on Virtual Machine 1)

No Approval requests are triggered

Virtual Machine 1

Entitlement 2

Policy B (Destroy - Virtual Machine Policy) on Destroy - Virtual Machine action only

Action 1 (Run Destroy - Deployment action on Blueprint 1)

No Approval requests are triggered

Blueprint 1, Blueprint 2, and Virtual Machine 1

Action 2 (Run Destroy - Deployment action on the Blueprint 2)

No Approval requests are triggered

Blueprint 2 and Virtual Machine 1

Action 3 (Destroy - Virtual Machine action runs on Virtual Machine 1)

Approval requests are triggered for Virtual Machine 1 only

Virtual Machine 1

Entitlement 3

Policy A (Destroy Deployment Approval Policy) on Destroy - Deployment action and Policy B (Destroy - Virtual Machine Policy) on Destroy - Virtual Machine action

Action 1 (Run Destroy - Deployment action on Blueprint 1)

Approval requests are triggered for Blueprint 1 only

Blueprint 1, Blueprint 2, and Virtual Machine 1

Action 2 (Run Destroy - Deployment action on the Blueprint 2)

Approval requests are triggered for Blueprint 2 only

Blueprint 2 and Virtual Machine 1

Action 3 (Destroy - Virtual Machine action runs on Virtual Machine 1)

Approval requests are triggered for Virtual Machine 1 only

Virtual Machine 1