As a tenant administrator, you want users outside vRealize Automation to approve a software component when a service catalog user requests a machine that includes software. You configure an approval policy that requires approval for all software provisioning and a workflow subscription that is configured to run when it receives pre-approval messages that match your defined conditions.