Looking for advice or best practice ideas for creating an approval flow that starts by granting access and ends by removing access to the group of selected approvers, and only for the file being approved.
Use case: A directory of controlled documents should never be edited by anyone outside the department that controls the documents.
However, different branches of the company should be able to approve new documents as needed.
People designated as approvers cannot be granted the approver permission level because this grants them edit rights to the entire document library. Best case scenario, every time they open a file with autosave turned on its switched back to draft. Worse case, they actually edit it.
I believe that no one should have the approvers permission level. It defeats the whole concept of controlled documents.
My thought is that after the approval flow launches then the list of people in the flow designated as approvers would be given high enough permissions to be able to approve only that one document. The approval runs. Then those permissions for that one file should be revoked or removed.
How do you accomplish this? What features or aspects of MS Flow should I be searching for in search engines?
Thanks,
