If the key management system determines that the requested operation received from the application requires quorum approval based on the policy, then the key management system may transmit an indication to the application that quorum approval is required before the operation is performed. The indication may identify a number of entities in the group that need to approve the operation before the operation is performed. In embodiments, the indication may include a prompt for the application to submit an approval request to the key management system.

In embodiments, upon receiving the approval request from the application, the key management system may transmit a request for approval to the entities of the group. The request for approval may include transmitting a notification, such as an email or text message, that notifies entities that an approval is pending. The notification may be transmitted to a device associated with the approving entity using the contact information of the entity stored in the data structure at the key management system. For example, the key management system may transmit an email to the approving entities of a group by identifying email addresses of the approving entities for a group in the data structure.