One-Time 'Process Elevation' Approvals

Prerequisites

Please make sure the following requirements are met for Process Elevation to be used

1. End-User Elevation Feature Enabled
   The feature must be enabled for the customer in the CyberQP dashboard. Refer this article for more details Configuring End-User Elevation

2. End-User Account Imported
   The end-user’s account must be imported under End-User Accounts in CyberQP

3. CyberQP Agent Installed
   The CyberQP Agent must be installed and running on the end-user’s machine.

Overview

The One-Time Process Elevation feature allows end-users to request elevated permissions to run specific privileged processes without granting them broader local administrator rights. Each request is tied to a specific process, ensuring security and control while providing flexibility for end-users.

How It Works

Technician Approval Process

When a technician opens an elevation request submitted via the UAC prompt, they will have an additional option to approve the request as a Process Elevation.

1. Accessing the Request:

   • All submitted requests appear in real-time on the MSP Technician Dashboard.

   • Technicians can only view and approve requests for customers and end-users they have access to.

2. Reviewing the Request:

   • The request details will include the process name, requester details, and submission timestamp.

   • Technicians should verify that the request is legitimate and aligns with security policies.

3. Approving the Request:

   • Technicians can approve the request as a Process Elevation, which allows the end-user to run the same process with elevated privileges once within a 48-hour window.

End-User Notification & Access

Once the request is approved, the end-user receives:

• Email Notification: An email informing them that their request has been approved (only if they have an email registered on the CyberQP dashboard).

• System Tray Prompt: A real-time notification if they are logged in at the time of approval.

The user can now run the specified process with elevated permissions once within 48 hours.

Note: If the user does not execute the process within the 48-hour window, the approval expires, and a new request must be submitted.