The Process Rights Action process rights action folder contains the actions to remove or add administrator rights. Removing administrator rights is used for applications such as web browsers to increase their locked down state for both administrators and standard users. Adding administrator rights comes in three ways:
- Add administrator rights (basic) - adds works for 99% of applications needing administrator rights without additional actionsAdd administrator rights (unrestricted) - adds the basic administrator rights with additional actionsneeded to install/run an application with administrator rights)
Add administrator rights (
Xcelsuisunrestricted) - adds administrator rights
only for specific applicationsat a higher integrity level
Info icon false Adding administrator rights (unrestricted) is usually only needed if an application/installer needs to create a global object such as a service (or system changes require unrestricted administrator rights)
To
...
view process rights actions, do the following steps:
- From the Arellia Security Manager console, go to the Policies tab.
- Navigate to Policies / Arellia Solutions / Application Control / Actions.
- Select Process Rights.
The available Process Rights Actions are as follows:
- Add Administrative Rights
- Add Administrative Rights - Unrestricted
- Remove Administrative Rights
- Remove Advanced Privileges Action
...
Create a
...
new action to adjust process rights
To create new action to adjust process rights, do the following steps:
- From the Arellia Security Manager console, go to the *Policies *the Policies tab.
- Navigate to Policies / Arellia Solutions / Application Control / Actions.
- Right-click Process Rights select New / Adjust Process Rights.
- From the Create Item window, you can name and describe the New Adjust Process Rights Action. Click OK.
- Configure the New Adjust Process Rights Action under Settings and select Save.
- The New Adjust Process Rights Action appears in the list of Actions under Process Rights.
