Request elevation
Application Control Solution (ACS) enables end users to request elevation and then have their request approved or denied by the help desk. You can approve or deny requests via the Thycotic Management Server (TMS), or forward requests to a third-party ticketing system such as:
Enable elevation requests
To enable elevation requests in ACS, do the following steps:
- In the Thycotic Security Manager, click the Policies tab.
- In the file library in the left pane, navigate to Application Control > Policies > Privilege Management > User Requested MSI Elevation Justification Policy.
- In the policy settings in the right pane, click the red Off button to enable the policy.
- Click the Application Actions tab.
- Under Applications, select Applications action (the default action is Approval Request Form Action or you can create a new request message for a third-party integration).
- Click Apply To and apply the policy to targeted computers.
- Click Save.
After you save the policy and the agent receives the update, the new message looks like this:
Users will enter their written request in the Reason (required) field and then send the request to the AMS.
Related links
Approve application execution requests