Admin By Request

Admin By Request – Overview

Admin By Request (ABR) allows users to temporarily elevate their device to administrator access when needed, without being assigned permanent admin rights.

How it works

• ABR is installed on all BSU-managed PCs
• Users operate as standard (non-admin) users by default
• Users who have been approved for admin access can start a temporary admin session by:
  1. Clicking the Admin By Request icon (green checkmark) in the system tray
  2. Selecting “Request administrator access”
  3. Completing multi-factor authentication (MFA)
• Once approved, the device enters an admin session for up to 30 minutes

Requesting access

Access to administrative functions is not enabled by default.

• Submit an IT support ticket to request access
• Include the name of the software you need to install or use
• IT will review and approve access as appropriate

Why we use it

• Security: prevents permanent administrator access
• Flexibility: allows admin tasks to be completed when needed
• Control: access is time-limited and requires MFA
• Auditability: all elevated activity is logged and reviewable

Important notes

• Admin access is temporary (30 minutes max)
• MFA is required to begin an admin session
• All actions during an elevated session are logged