Skip to main content

Hello community

I'm looking for a solution to only allow self-service application installation, even for local admin accounts.
I tried blocking the installation process, but unfortunately this also blocks self-service installations.

There is not really a way to block users from performing administrative tasks like installing applications while they have administrative access. You need to remove the admin access.

 

As far as tasks that need elevated privileges, you could look in to an EPM tool like the one CyberArk makes. This could escalate the workflows that need admin access without giving the users admin access.


Reply