What authorization models are supported? (i.e., pre-approved, approval workflow, etc.)?

There are two basic patterns to grant access to privileged accounts. Users who need access routinely (e.g., platform administrators) should be granted pre-authorized access. This means that they can check-out access at will. Users who need access only occasionally, either on a scheduled basis (e.g., developers) or in an emergency (e.g., support or data center staff). These users should be subject to a request / approval workflow process before gaining the right to check-out access. Read more at: https://hitachi-id.com