Managing Requests

Managing Elevation Requests

As end-users generate elevation requests, administrators can efficiently manage these requests through the Keeper Admin Console. This interface provides a streamlined process for approving or denying requests in real-time, ensuring that legitimate user needs are met while maintaining security.

Accessing the Requests Dashboard

To manage elevation requests:

1. Log in to the Keeper Admin Console

2. Navigate to Endpoint Privilege Manager > Requests tab

Working with the Request Queue

The requests dashboard displays all pending elevation requests across your environment. By default, requests are sorted by wait time and priority, ensuring that users are processed in the order received.

Reviewing Request Details

To review a specific request:

1. Click on any request in the queue to open its details

2. Review the detailed information provided:

   • Application information

   • User's justification message

Taking Action on Requests

For each request, administrators can:

• Approve: Grant temporary elevated privileges for the requested process

• Deny: Reject the elevation request with an optional explanation

Managing Request Volumes

For organizations with high volumes of elevation requests:

• Delegation: Configure multiple approvers across different teams or regions

• Auto-Approval Rules: Set up to automatically approve routine requests

• Generate Alerts: Keeper's Advanced Reporting & Alerts module can send real-time alerts.

Alert Setup

From the Keeper Admin Console, go to Reporting & Alerts > Alerts > and create a new Alert.

Select "Agent created approval request" from the event types and then choose the recipients.

The recipient can be an email address, SMS text message, or Webhook to any automation platform or ITSM such as Slack, Jira, ServiceNow, etc.

Automation with Commander

Keeper Commander supports request automation through our command-line interface, Service Mode and Python SDK. about Endpoint Privilege Manager commands.

Approvals

The pedm approval command provides management over approvals.

Approve or deny a request with pedm approval --approve or pedm approval --deny