# Running RunBooks with Approvals

When a RunBook with advanced privileges needs to be run, it makes sense to have another pair of eyes double check the execution.  

Using [Role Based Access Control](https://docs.unskript.com/unskript-documentation/tooling/role-based-access-control), this is possible.  In our example, we'll be looking at a RunBook that Drops all tables:

<figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FWrWu0gqf5piGBsZxMIrA%2FScreenshot%202023-05-17%20at%2013.10.43.jpg?alt=media&#x26;token=c4b62200-189e-4f1e-a13c-5489bfa4b737" alt="The Drop all Tables Runbook"><figcaption><p>Drop all Tables Runbook</p></figcaption></figure>

Step 1: Move your RunBook to a new folder.  In this case, the Runbook is in the NuclearOptions folder:

<figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FeM8CKLIGeJWc1kDJOmtE%2FScreenshot%202023-05-17%20at%2013.12.34.jpg?alt=media&#x26;token=b17fb535-a6a7-4970-a8d8-d63929ec7f82" alt=""><figcaption></figcaption></figure>

Step 2: open the RunBook details (in the right menu), and choose the  "requires approval" checkbox.

<figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FcgVHquE0Pumm8a4rBhE8%2FScreenshot%202023-05-17%20at%2013.13.51.jpg?alt=media&#x26;token=16785c5a-e4e9-4bef-a68b-459856ffc71d" alt=""><figcaption><p>Click this checkbox to require approvals</p></figcaption></figure>

Step 3: Return to the list of Runbooks, and the "Run" button has changed to "Request":

<figure><img src="https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FFu7AKBZSRiD3bBfprCyt%2FScreenshot%202023-05-17%20at%2013.16.53.jpg?alt=media&#x26;token=99d00795-2ba8-48c0-bd93-4db6e7920032" alt=""><figcaption></figcaption></figure>

When you click this button, you will enter the input values, and your Runbook will be placed in the approver queue.

### Approving a RunBook

Under "Requests" in the top navigation, there is a page listing all RunBook requests:

![](https://491011674-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fm4p7lGuBAXN5jCVyoF7P%2Fuploads%2FiIIN5dTPLgLOJfwaig2A%2Fimage.png?alt=media\&token=5501c853-72dd-4d77-8d9f-d2c0af4ed5ae)

An [authorized approver](https://docs.unskript.com/unskript-documentation/tooling/role-based-access-control/rbac-roles) must approve (or reject) the RunBook execution.  Using the User Management, add users to a group with "Approver" permissions for the directory with the RunBook.  Those users will be able to approve the execution