Process rights

The process rights action folder contains the actions to remove or add administrator rights. Removing administrator rights is used for applications such as web browsers to increase their locked down state for both administrators and standard users. Adding administrator rights comes in three ways:

• Add administrator rights (basic) - works for 99% of applications needing administrator rights (adds the basic administrator rights needed to install/run an application with administrator rights)

• Add administrator rights (unrestricted) - adds administrator rights at a higher integrity level

  Adding administrator rights (unrestricted) is usually only needed if an application/installer needs to create a global object such as a service (or system changes require unrestricted administrator rights)

To view process rights actions, do the following steps:

1. From the Arellia Security Manager console, go to the Policies tab.
2. Navigate to Policies / Arellia Solutions / Application Control / Actions.
3. Select Process Rights. 

The available Process Rights Actions are as follows:

• Add Administrative Rights
• Add Administrative Rights - Unrestricted
• Remove Administrative Rights
• Remove Advanced Privileges Action

Create a new action to adjust process rights

To create new action to adjust process rights, do the following steps:

1. From the Arellia Security Manager console, go to the Policies tab.
2. Navigate to Policies / Arellia Solutions / Application Control / Actions.
3. Right-click Process Rights select New / Adjust Process Rights.
4. From the Create Item window, you can name and describe the New Adjust Process Rights Action. Click OK.
5. Configure the New Adjust Process Rights Action under Settings and select Save.
6. The New Adjust Process Rights Action appears in the list of Actions under Process Rights.