Considerations
Before you start running operations by using quorum approvals, ensure that you understand the
following considerations:
- The operations under quorum approval have a delay in execution. This delay is because the operation runs only when a sufficient number of approvals are received from approvers as defined in the quorum group or the operation falls back to auto-approval after a time limit defined in the quorum group. Hence, the users initiating an operation under quorum must wait for the operation's approval prior to its execution.
- Only one operation of each operation type is queued for quorum approval at any given time. For example, suppose a request to add a new user is awaiting quorum approval. In that case, any other requests to add new users are not accepted until the existing add user operation is approved or denied.
- Quorum approval is complementary to, but different from RBAC. Quorum approvers who are approving an operation request need not be granted an RBAC role with permission to initiate the operation. RBAC only enforces who can initiate an operation, not who can approve it.
- Quorum supports Data Protect cluster and
Data Management operations. The operations can be
granular to the API endpoint level. For information about using Data Management Reporting APIs, click the Help Center icon
on the menu bar and select Get REST
APIs. - Operations under quorum execute in the order that they are approved, not the order they were initiated.
- Only the user who initiated the operation under quorum can withdraw the request. An admin cannot withdraw the pending request.
- The quorum approval process is now enhanced to manage scenarios where a quorum member initiates
a quorum-protected operation. When a quorum member initiates a quorum-protected operation, the
request is auto-approved for the requester. The other members in the quorum group must approve the
request for the quorum- protected operation to execute.
For example,
In a quorum group with 3 members, with the approval quorum set to At least 2, if a member in the quorum group initiates the request to execute a quorum-protected operation, then one of the members apart from the requester must approve the request.