Safeguard Privilege Manager for Windows 4.4 - Administrator Guide

Temporary Session Elevation Request Report

This report allows you to track Temporary Session Elevation passcode requests from managed client computers. With this report, you can see when a passcode has been generated based on a request, if the request was denied, or if the request is still pending review.

The Temporary Session Elevation Request report contains these details:

• User (Domain\Name): The user that used the passcode on their machine.
• Action: The state of the Elevation request. This can be Pending (when a request is received), Granted (when a passcode is generated for the request) or Denied ((when a passcode request is not granted).
• Processed Date: The date the administrator respondeds to the request.
• Reason: The reason given for the Elevation request.
• Maximum Allowed Usage: The number of times the passcode can be used before expiring.
• Duration: The amount of time the passcode remains active for when used.

• Computer (Domain\Name): The computer that the passcode is requested from.

• Request Sent: The date and time the user submits the request for a passcode.

To learn how to create this type of report and manage the data, see Generating and using reports.

Temporary Session Elevation Requests Report

Temporary Session Elevation Usage Report

This report allows you to track Temporary Session Elevation activity during a period of time on managed client computers. With this report, you can see when users are granted temporary Instant Elevation privileges using passcodes, on which computers, and also which specific applications were elevated.

The Temporary Session Elevation Usage report contains these details:

• User (Domain\Name): The user that used the passcode on their machine.
• Maximum Allowed Usage: The number of times the passcode can be used before expiring.
• Remaining Usage: The number of times that are left to use this passcode.
• Usage Count: The number of times this passcode is used so far.
• Elevated Item: The application that was run in an elevated state.
• Computer (Domain\Name): The computer that the passcode was used on.
• Time Elevated : The date and time the Elevation occurred.
• Passcode ID: The exact passcode provided by the administrator.

To learn how to create this type of report and manage the data, see Generating and using reports.

Rule Details Report

This report lists all the configuration details for a rule in a single view. The detail for each privilege Elevation event are specified in the Create Rule Wizard. For more information, see Using the Create Rule Wizard.

To learn how to create this type of report and manage the data, see Generating and using reports.

Advanced Policy Settings Report

This report lists all configuration details, except those set to the Not Configured option, of the Advanced Policy Settings for your GPOs in a single view:

• Client Data Collection Settings
• Client Deployment Settings
• Self-Service Elevation Request Settings
• Privileged Application Discovery Settings
• Instant Elevation Settings

The details for each privilege Elevation event are specified in the corresponding section for each of the settings.

To learn how to create this type of report and manage the data, see Generating and using reports.