How it works
When a user starts installing software, the system catches the request and installs it through a full approval flow — without giving them permanent admin rights. Users need no retraining; all it takes is a small agent on the endpoint.
Admin By Request · EPM
Admin Rights Management
Admin By Request lets you manage user privileges efficiently and safely — and removes the risk of local admin rights. Unlike competing products it is simple and quick to implement, and most customers move to it successfully from other tools.
The challenge
Either everyone is an admin
Users keep local admin rights — and every malicious file runs with them.
Or the helpdesk does everything
IT connects remotely for every install and small task, again and again.
And incidents drag on
Without rights on the user’s side, even fixing a problem gets stuck.
Capabilities
- Complete removal of admin rights from endpoints and servers.
- Two elevation modes: run a specific application, or full admin rights for a limited time.
- Pre-approved applications that users run transparently, without interruption.
- Real-time request and approval flows — through your ticketing system, Teams, Slack or a mobile app.
- Replace local admin accounts or LAPS with just-in-time access.
- Detailed reports on all access and privilege activity.
- Protection against unauthorized access, malicious attacks and privilege misuse.
- Supports Windows, macOS and Linux.
- A secure cloud management portal and a small agent (about 2 MB) on the endpoints.
Implementation
1. Pilot
- Basic setup and connection to your identity system — domain-joined, hybrid, Entra-joined, and even non-domain computers.
- Deploy in learning mode without removing rights: the system learns which tools and apps run as admin.
- Test special applications — in-house, legacy or rare software — to make sure they run without errors.
- Define policies by group, at least for end users and the support team. The pilot can run on the free plan, up to 25 endpoints.
2. Full rollout
- Deploy agents to all endpoints in learning mode and collect data for at least two weeks.
- Pre-approve apps by version, digital certificate, name or path — for groups or the whole organization.
- Connect your request and approval channels.
- Remove admin rights gradually, then switch to full enforcement.
Ask someone who knows.
A short intro call with a security engineer from the team. No call center, no sales script.