Request temporary access to applications

This topic describes how end users can request temporary access to applications that are currently unavailable to them.

Overview

Use this workflow when you temporarily do not have EPM service connectivity, and the EPM admin is unavailable to create a proper policy, or any other reason that prevents your agent from receiving updated policies.

Request an authorization code

End users on both Windows and macOS agents can request an authorization code using the Request for Authorization window.

  1. Display the Request for Authorization window in either of the following ways.

    • Attempt to launch the application:

      If the application requires an authorization code before you can open it, EPM displays a message saying that the application is blocked.

      Depending on how this workflow is configured by the EPM administrator, you may be able to click Request authorization to open the Request for authorization window. This window is open for a certain number of minutes, defined by the administrator, after which you need to open the window again. By default, this window is open for 5 minutes.

    or

    • Request administrative privileges:

      Right-click the application and select Run as administrator. If the application requires an authorization code before you can run it as an administrator, the following window appears.

      Click Request Authorization to open the Request for authorization window. This window is open for 10 minutes, after which you need to open it again.

  2. In the Request for authorization window, copy the request ID and send it to the IT administrator (or any other person who is authorized to create an authentication code) with a request for access.

  3. They will create an authorization code and send it to you. This code determines the authorized action and the validation period of the code. For details, see Create an authorization code.

  4. When you receive the code, do the following:

    • In Windows, paste it in the Request for Authorization window and click OK.

    • In macOS, use it in the sudo command to run the application.

You can access the application for the duration configured in the code and only perform the action specified in it.

Use a predefined authorization code

If an IT administrator (or any other person who is authorized to create an authentication code) has proactively generated an authorization code for you without waiting for a request, and has already sent it to you, use it as explained below.

  1. When you receive the code, right-click the application to run and select Run with Authorization Code to display the dialog.

  2. Paste the authorization code, and then click OK.