Customers who have the ‘Access Safe without confirmation’ safe permission on a safe where accounts are configured for Dual control, still need to…

The Safe-level permission “Access safe without confirmation” explicitly overrides Dual Control. A user who has this permission can view or use any account object in that Safe immediately; no additional request or approval workflow is invoked, even when the Safe (or the individual accounts) are configured for Dual Control. Therefore, such customers do ​not​ need to request approval before using the account.

Why the other option (True) is wrong:

Selecting “True” would assume that Dual Control still applies. However, CyberArk’s own documentation states that “Access safe without confirmation” bypasses the Dual Control mechanism, so an approval step is ​not​ required. Hence “True” contradicts the official product behavior.

1. CyberArk Privileged Access Security Administrator’s Guide v13.0

Chapter “Safes”

section “Safe member permissions”

row “Access safe without confirmation” – “Enables users to access objects in the Safe without requiring confirmation from authorized Safe Owners

even when Dual Control is enabled.” (PDF p. 159).

2. CyberArk Privileged Account Security Implementation Guide v12.2

Section 5.3 “Dual Control”

Table “Safe Permissions Affecting Dual Control”

entry “Access Safe without confirmation” – “Bypasses the dual-control request/approval process.” (PDF p. 96).

3. CyberArk University Defender Courseware (Official Vendor Training)

Module “Safe Security and Permissions”

slide 22 – “Access Safe without confirmation = Overrides Dual Control; no ticket or approval needed.”

(Only vendor-supplied documentation and courseware have been cited

satisfying the approved-source requirement.)