From db8b953fc5be5ebdb09ad44ecd524669be602a30 Mon Sep 17 00:00:00 2001
From: Vincent Salucci <vincesalucci21@gmail.com>
Date: Thu, 5 Jun 2025 16:12:00 -0500
Subject: [PATCH] chore: refactor canManageDeviceApprovals for clarity, refs
 PM-22390

---
 .../src/admin-console/models/domain/organization.ts | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/libs/common/src/admin-console/models/domain/organization.ts b/libs/common/src/admin-console/models/domain/organization.ts
index 771fb178932..dfcc4ac11c7 100644
--- a/libs/common/src/admin-console/models/domain/organization.ts
+++ b/libs/common/src/admin-console/models/domain/organization.ts
@@ -307,10 +307,15 @@ export class Organization {
    * the latter has been added as a prerequisite.
    */
   get canManageDeviceApprovals() {
-    return (
-      (this.isAdmin || (this.permissions.manageResetPassword && this.permissions.manageUsers)) &&
-      this.useSso
-    );
+    if (!this.useSso) {
+      return false;
+    }
+
+    if (this.isAdmin) {
+      return true;
+    }
+
+    return this.permissions.manageResetPassword && this.permissions.manageUsers;
   }
 
   get isExemptFromPolicies() {