Elevate

if the users select elevate as the policy action, configured users or users’ groups will be asked for elevation to run the configured application in the selected endpoints in this step, the user is expected to choose the endpoints these endpoints could be agents or agent groups that are grouped earlier in the agent dashboard in this step, users will be configuring child processes when an application is launched it may be required to run some child processes to make the application function since not every application requires this and it could be used as an attack vector, system admins can decide whether this application will be permitted to call and execute child processes or not if this is not configured with care, it can prevent applications from running normally in the last step, the user is expected to configure a just in time access configuration when an agent blocks an application users can ask for an elevation to access the blocked application users can configure the required security steps to grant access to the user this can be configured separately for admins and standard users to get access depending on the configuration users can be asked for mfa and managerial approval via email