The approval and denial email messages that are sent as a response to the user's Self-Service Elevation request can be customized.
The default Approval message says the following:
MESSAGE_NAME:ApprovedRequest
MESSAGE:
Your request to run the following application with elevated privileges has been "approved".
Request Date: <ExecutionDate>
Requested Application:
<ProductName>
<Path>
<Arguments>
Reason for request: <Reason>
This new privilege should be available on your computer once Windows has refreshed its domain security policies.
The default Denial message says the following:
MESSAGE_NAME:NotApprovedRequest
MESSAGE:
Your request to run the following application with elevated privileges has "not" been approved.
<ProductName>
<Path>
Please contact your administrator for more details.
These messages can be customized by opening the MessageTemplates.cfg file in the Privilege \Console folder.
Each message in the CFG file starts with ======StartOfMessage========= and ends with ======EndOfMessage============.
The text between these delimiters can be customized to your liking.
Text delimited with angle brackets "< >" are variables that are replaced with data at runtime.
The following variables may be used in the Approval message:
The following variables may be used in the Denial message:
If you would like to receive an email when a user on a client computer submits a Self-Service Elevation Request Form, you can set up a Self-Service Notification. You can configure it to go to multiple recipients, including you, your manager, and/or the help desk. In addition, you can set the subject line to meet the requirements of your help desk.
To set up Self-Service Notifications:
Configure the Server.
Configure the recipient.
Shortly after a user on a client computer has submitted a Self-Service Elevation Request Form, you can view and/or process it within the Self-Service Elevation Requests section of the Console (provided that your environment is properly configured according to the Maximum Sleep Time setting).
You can only view data stored in the database of the server that is selected in the Server configuration (under Setup Tasks > Configure a Server).
When processing a Self-Service Elevation request, you can either create a rule to elevate privileges for the process or deny the request. You can then email your decision to the user using the Console Email Configuration screen.
To view or process Self-Service Elevation requests:
By default, the following information appears:
On the first tab of the wizard, view the details for a process that failed to start, and the reason for requesting Elevation privileges. Click Next.
Indicate whether you want to create a rule to elevate the privileges for this process, or deny the request.
Select whether or not to email your decision to the user. This feature requires that you set up the Console Email Configuration settings.
Click Finish to save.
The rule created from the request is added to the selected GPO with a default name.
Select Export to export the list of requests presented on the grid. The list will be saved as an .xls file.
After the rule has been created:
If you want Privilege Manager to send an email message to the user after approving or denying their Self-Service Elevation request, you can configure the settings using the Console Email Configuration screen found under Setup Tasks.
To configure the Server to send your Self-Service Elevation request approval or refusal:
Configure the following fields:
Click Send Test Email to send an email to the account specified in the From Email field.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center