Block
If the users select blocked as the policy action, configured users or users’ groups will be blocked from running the configured application in the selected endpoints. In this step, the user is expected to choose the endpoints. These endpoints could be agents or agent groups that are grouped earlier in the agent dashboard.
Windows agent displays a pop-up message when an application gets blocked due to policies. In this step, the user is asked to configure whether this pop-up will be visible to standard users and admin users. If the dialog box is selected no message will be displayed to the users when an application gets blocked.
In this next step, the user is expected to configure a just-in-time access configuration. When an agent blocks an application users can ask for an elevation to access the blocked application. Users can configure the required security steps to grant access to the user. This can be configured separately for admins and standard users. To get access depending on the configuration users can be asked for MFA and Managerial approval via email.