Can a member (or members) of a tenant approver group approve multiple tenant users?

Hi,

My question is "Is it possible that a user becomes a tenant approver of multiple tenants and provides approvals to users in each tenant?"

What we'd like to do is as follows. In this example, can admin01 approve users in both Tenant A(dev-group-a) and Tenant B(dev-group-b)?

We've tested five patterns.

Test 1

All the users were in an AD domain. There were three groups. AD and ViPR settings were as follows. In this case, Both admin01 and admin02 never received request from any users in Tenant A(dev-group-a) and Tenant B(dev-group-b).

Test 2

We added dev-group-a attribute to admin01. admin01 could approve users in Tenant A(dev-group-a) but admin02 never got any request from users.

Test 3

We tried to put approver(admin01) into all the three groups. However, we could not make it with error:"User sds-admin01@xxxxx.com does not map to any tenancy" when adding the third group right to admin01.

Test 4

We added admin-group into the Tenant B setting of ViPR. Both admin01 and admin02 could approve requests from Tenant B(dev-group-b) but never received any request from Tennant A(dev-group-a).

Test 5

We tried to add admin-group into both Tenant A and Tenant B. However, we could not make it with redundant error.

It seems a member (or members in a group) cannot approve multiple tenant users but users in "a" tenant. Is this as designed?