We’re thrilled to announce that Microsoft Intune Endpoint Privilege Management added support-approved elevations in the March release of Microsoft Intune. Since Endpoint Privilege Management was released a year ago, IT pros have used the solution to ensure end users remain productive while maintaining least privilege access. Until now, IT pros have created elevation rules for the most used applications in their environments. However, when end users requested elevated privileges to use applications that had no associated rules, they were automatically denied. This required end users to submit a help desk ticket to proceed. Today, there is a simpler solution with the new capability of support- approved elevations.

Support-approved elevations empower users to request temporary administrative privileges for specific applications or tasks, streamlining their workflow while maintaining a strong security posture. Windows standard users can request approval to elevate an application that has no existing privilege elevation rule associated with it. Support-approved elevations require Intune administrators to review elevation requests on a case-by-case basis. The Intune administrator approves or denies the request, allowing the end user to proceed when deemed appropriate.

In general, Endpoint Privilege Management enables standard users to perform tasks that typically require elevated privileges, such as installing applications or updating device drivers. For IT admins, Endpoint Privilege Management makes it easier to manage standard users while maintaining a Zero Trust framework. The capability also offers reporting, providing visibility into privilege elevation across an organization.