How to automatically allow end-users to be approvers