Temporary Admin Codes

Introduction

EPM also gives users the ability to request temporary administrator access, this feature can also be used if the user is offline. Codes are used by users to elevate the privilege of their account for a configurable period of time. These codes are generated by a EPM administrator, and the usage of temporary administrator codes will be logged on the EPM Server.

Additionally, EPM will record all processes running elevated throughout the duration of a user's temporary admin session, providing you visibility of exactly what actions the user carried out.

To get started with understanding EPM in more detail, see our How EPM Works guide.

In situations where users are unable to connect to the corporate network to receive new policies, or need to carry out administrator actions that are not related to an application (executable file) such as changing network settings, users can request a Temporary Administrator Code.

For End Users

End users should open the EPM application on their on their desktop.

Users can then request a temporary admin code, by using the contact details set up in the EPM Client configuration. In the example above, we're using an email contact, but this could also be a link to a ticketing system, or a phone number for your internal helpdesk.

For EPM Admins

EPM Agents can then generate a code under the Requests tab in the EPM Admin UI.

For more information on EPM Client configuration, please see our End User Communication guide, and for more detail on setting this up, the articles available on our support portal.

Self Approval

For some users, it may be useful to grant them the permission to self approve their own temporary admin sessions, meaning they do not need to request an approval code from their helpdesk. Groups can be granted self approval permissions through the Policies page in the EPM web UI. Select the Self Approval tab and add AD groups to the list to grant them self approval.