Moving Strict Approval Workflow Enforcement from Domain Control to the Policy Editor
Hey there!
One of our goals for 2018 is to simplify the experience of using Expensify. We have often heard from our customers that they find the relationship between Domain Control and policies confusing.
Today, we're announcing the first in a number of steps to improve this, by moving Strict Approval Workflow Enforcement out of Domain Groups and into your policy.
What does this mean for you?
On February 14th, we will be moving Strict Workflow Enforcement from Domain Groups in Domain Control to the People page in your policy.
- If you are a customer with Strict Workflow Enforcement enabled in at least one domain group, we will automatically enable this setting on all of your policies on February 14th.
- If you do not have Strict Workflow Enforcement enabled for any domain groups, we will not take any action.
- In addition, this setting will be enabled by-default on any policies created after February 14th, and you can manage this setting on the People page of your policies.
- Strict Workflow Enforcement will not apply to Policy Admins, as they can already edit the policy's workflow.
What action do you need to take?
If you are a Domain Administrator for a domain which has this setting enabled, we will automatically enable Strict Workflow Enforcement on all your polices on February 14th.
You don't need to take any action for this to happen.
If you do not want this setting to be applied, please disable Strict Workflow Enforcement on all domain groups by February 13th.
How to find this setting in Expensify
This setting requires that you have validated your email domain for Domain Control in Expensify.
Between now and February 14th, Strict Workflow Enforcement can be found within your domain groups settings. If you're a Domain Admin, you can find this setting via Settings > Domain Control > your domain > Domain Groups tab, then click Edit next to each domain group.
The specific setting you're looking for is Strictly enforce expense policy workflows.
If this setting is enabled in one domain group, then it will be enabled for all policies owned by users with an email address from that domain.
After February 14th, this setting will be available in the People page of the policy:
This setting will apply to all members of the policy, with the exception of Policy Admins. This is because Policy Admins can already change the policy's workflow.
What does Strict Workflow Enforcement actually do?
Great question. With Strict Workflow Enforcement enabled, all policy members will be restricted to submitting reports to the person in their Submits To field, and will approve reports according to how the Approves To and Threshold Approves To is set up in the People page.
With it disabled, a submitter will be able to define who they submit to, and an approver can choose the next action after they approve a report.
What if there are multiple domains in Expensify?
During this migration, we will look at the domain the policy owner belongs to, and enable or disable Strict Workflow Enforcement based on that domain.
For example, you have two domains set up in Expensify (happycompany.com and excitingproducts.co.uk). Your policies are all owned by expenses@happycompany.com. On February 14th, we'll look to see if any happycompany.com domain groups have this setting enabled. If any have this enabled, we will enable this for your policy and will apply it to all policy members, even if they don't have your company's domain.
How to check if your domain is under Domain Control in Expensify
You can check if Domain Control has been enabled for your domain by signing in to expensify.com and going to Admin > Domain Control.
- If you cannot see Admin, then you are not a Policy Admin or a Domain Admin. You will need to contact a Policy Admin or Domain Admin for any help.
- If this page shows you the advantages of Domain Control, then it is not enabled for your domain.
- If this page shows your domain, with a button to verify, then Domain Control has been started but has not been completely set up (click Verify to complete the setup steps!)
- If this page shows your domain, but you cannot seem to take any action, then your domain is under Domain Control, but you are not a Domain Admin and so cannot take any action. Please contact your Domain Admin for any help.
- If this page shows your domain, and you can click on your domain, then your domain has been set up for Domain Control, and you are a Domain Admin.
Comments
-
This is such fabulous news! Thank you!
-
Thanks! Please also move Strictly Enforce Expense Policy Rules to the policy level too.
We have a policy for Recruiting Candidates, and since they are not Domain Control'd, they end up not following all the policy rules.
I understand that some companies want to have some people that are not strictly enforced to follow the policy rules. I offer this suggestion: On the Domain Group, change the option to "Override the Strictly Enforce Expense Policy Rules".
-
I wish I could set up SAML at the policy level as well. I realize that this may not be the case for every user, but it would really help me manage users. Some of my users need SAML and some don't.
-
Conor Pendergrast Expensify Success Coach - Admin, Expensify Team, Expensify Student Ambassador Posts: 175 Expensify Team
@jessebATmsc You're very welcome!
@Daveweez That's on our list too, just have to finish this migration first
@tylerzoll I usually see SAML as offering either convenience ("One fewer password for an employee to store or remember") or security ("We can offboard employees extremely efficiently). Is one of those the case for you, and how do you define which employees need, and which don't need, to sign in using SAML?
-
@Conor Pendergrast, we want to use Expensify for our board of directors, volunteers and other groups. For our Employees it would be a good thing.
-
Conor Pendergrast Expensify Success Coach - Admin, Expensify Team, Expensify Student Ambassador Posts: 175 Expensify Team
Thanks @tylerzoll ! Let me DM you to learn a little more here
-
Conor Pendergrast Expensify Success Coach - Admin, Expensify Team, Expensify Student Ambassador Posts: 175 Expensify Team
Hey everyone, as a reminder this migration is happening today. After today (February 14th 2018) the setting to restrict policy workflows will live in the policy editor within the People page.
If you have any questions, feel free to post them here!
-
So the disable button won't be available until tomorrow, Feb 15? We do not want this feature.
-
Conor Pendergrast Expensify Success Coach - Admin, Expensify Team, Expensify Student Ambassador Posts: 175 Expensify Team
@TammyP That setting will not be enabled by default for existing policies, and will only be enabled for your policies if it was enabled on your company's domain via Domain Control.
Looking at your account, you don't have any domain groups with this setting enabled, and so this will not be enabled for you.