Arellia Application Control Solution can enable end users to request elevation and then have that request approved or denied by the help desk. Arellia can approve or deny requests via the Arellia Management Server (AMS), or forward requests to a third-party ticketing system such as:
Enable Elevation Requests
To enable elevation requests, do the following steps:
- In the Security Manager Console, click the Policies tab.
- In the file library in the left pane, navigate to Application Control > Policies > Privilege Management > User Requested MSI Elevation Justification Policy.
- In the policy settings in the right pane, click the red Off button to enable the policy.
- Click the Application Actions tab.
- Under Applications select Applications action (the default action is Approval Request Form Action or you can create a new request message for a third-party integration).
- Click Apply To and apply the policy to targeted computers.
- Click Save.
After you save the policy and the agent receives the update, the new message looks like this:
Users will enter their written request in the Reason (required) field and then send the request to the AMS.
View, Approve or Deny Requests
You can then view, approve or deny requests in the Security Manager Console. . .
. . .in the Help Desk Console. . .
. . .or in a third-party ticketing system.
While the request is being evaluated, whenever end users start the application they have requested elevation for, a status pending message will appear (see following screenshot).
After the request has been approved or denied, then end users will receive the approval or denial message (see following screenshot).
Related Links