Skip to content

Release notes for the July, 26 2026 update

Update Version 4.1.202607250358

New Features

Added session management permissions for asset workflow approvers.

This update allows the application to automatically grant dedicated permissions to users who are designated as approvers for asset assigned workflows. Users designated as workflow approvers can now perform the following actions without requiring additional administrative permissions including the option to establish sessions or unlock secret fields:

  • Access the web console with no permissions other than workflow approver.
  • Search for, browse, and view assets associated with assigned workflows.
  • View remote sessions associated with assigned workflows.
  • Join or terminate active sessions associated with assigned workflows.
  • Play back session recordings and review session events for completed sessions associated with assigned workflows.

The workflow approver role enables organizations to separate access governance from privileged access. Approvers can review requests, monitor active sessions, join or terminate sessions when necessary, and audit completed activities without receiving privileged access to the managed assets themselves.

This approach supports the principle of least privilege, strengthens segregation of duties, and helps organizations meet security and compliance requirements by ensuring that those responsible for approving and overseeing privileged access cannot use that access for administrative tasks.

Extensions

  • Added enforcement for exclusive action requests.

  • Added approval expiration for pending workflow requests.

  • Added customizable email templates for request submission, approval, and rejection notifications.

  • Added support for archiving Sessions and Session Events according to the configured session retention policy.

  • Added support for archiving historical backups according to the configured backup retention policy.

  • Added Verify Trust option for Entra ID configurations to load Microsoft certificates into the tenant store.

  • Added support for interactive script execution on remote assets that prompts users to enter additional script parameters through a graphical user interface.

  • Added a link to the asset on the My Requests and Approvers List.

  • Added the option to override default WEB console idle timeout for individual sessions using access profile setting.

Security

Components Update

  • Updated application WEB framework to the latest version.

  • Updated dashboard chart component to the latest version.

  • Updated client side markdown toolkit to the latest version.

  • Updated IBM i driver to the latest version.

Application build process update

  • Updated build environment including run time framework, build toolkit and repository actions to the latest version.

  • Reduced build log verbosity to simplify troubleshooting and improve the visibility of errors and warnings.

Fixes

  • Fixed the issue preventing Asset Manager users from terminating active sessions.

  • Fixed the issue with Asset Access action label displayed on the list of requests.

  • Fixed an issue with QR codes being difficult to scan during TOTP enrollment.

  • Fixed the issue with incorrect level number displayed for the approved, completed or rejected requests on the Request View and Requests List screens.

  • Fixed the issue with password reset scripts for MySQL and MariaDB.

  • Fixed the issue with initializing SSH Proxy in new tenant.

  • Fixed the issue with mass enabling Assertion based Entra ID configurations.

  • Fixed the issue with reporting low level communication errors when processing Cloud AI queries.

  • Fixed the issue with interactive password reset screen to enable the process using initial form configuration with generated password.