# Admin Console 17.7.0 ## Overview This release includes Keeper Endpoint Privilege Manager (KEPM) features and bug fixes, most notably the introduction of the Approvals screen for both KeeperPAM and EPM. This new centralized approval management system unifies privilege elevation requests across both platforms into a single workflow, reducing administrative overhead and providing consistent governance across your organization. ## New Features ### Global Approvals Added a global Approvals screen within the Admin Console, allowing administrators to configure approving teams for Keeper Endpoint Privilege Manager (KEPM) and PAM request types.

Request Approvals

Select **Add Approvers** to set the primary approving team responsible for reviewing requests, and designate escalation approvers who can step in if the primary team is unavailable. Define an expiration window — the time limit within which approvers must act before the request is escalated or expires.

Approver Configuration

* **EM-8160:** Approval workflows are now event-driven rather than policy-driven, streamlining the request and escalation process across KEPM and PAM. * **EM-8194:** Added an Approving Team designation to the Teams section of Admin Console, enabling teams to be configured as approvers with associated request types and escalation settings. * **EM-8221:** Added real-time push notifications for privilege escalation requests, surfacing them in the Admin Console and Notification Center without requiring a manual Quick Sync. * **EM-8163:** Added policy filtering to the KEPM Policies screen, allowing admins to filter by Policy Type, Status, Machine Collection, User Groups, and Application. * **EM-8164:** Added wildcard support (e.g. `*.exe`) for resources across Deployments, Application Collections, Machine Collections, OS Collections, and User Collections. * **EM-8416:** Added a Command Line approval configuration type in Approvals, alongside existing Custom, Privilege Elevation, and File Access configs. * **EM-8042:** Added the ability to delete agents from the Endpoint Privilege Manager Deployments screen, with confirmation prompt and toast notification on completion. * **EM-8064:** Added human-readable detail to ARAM event rows for KEPM, including collection link changes and registered agent events. * **EM-8263:** Added automatic initialization of custom application resources for default executable directories across Windows, macOS, and Linux on first KEPM sync. * **EM-8330:** Added backwards compatibility logic to prevent removal of all users from an Approving or Escalated Approvers team, with an error message shown when the last approver is removed. * **EM-8336:** Removed the restriction preventing the "All Applications" filter from being used in enforced File Access policies. * **EM-8337:** Increased the width of the advanced mode policy editor and added a smooth animated transition when switching between basic and advanced modes. * **EM-8108:** Updated the policy editor so that basic and advanced modes toggle rather than display side by side, with validation occurring on blur and prior to saving. * **EM-8182:** Removed the requirement for non-empty collections on policy filters, allowing policies to be saved with empty collections. * **EM-8109:** Added resource counts to collection pills in the policy add/edit modal. * **EM-8088:** Updated the Agent Status filter on the Deployments screen to support multi-select checkboxes instead of radio buttons. * **EM-8253:** Removed the pre-deployment warning modal with mandatory checkboxes from the KEPM agent installer download flow. * **EM-8121:** Updated the Enable/Disable options on the Review page to dynamically reflect the selected agents' current status. * **EM-8107:** Added a mechanism to force a browser cache refresh on version upgrades to prevent stale UI elements. * **EM-8352:** Updated ARAM event entries for KEPM agents to display "KEPM Agent" instead of "PEDM Agent." * **EM-8332:** Updated the KEPM Dashboard Recent Events section with corrected Agent ID references. * **EM-8072:** Removed the restriction that prevented saving a policy when all collections in a filter were empty. ## Bug Fixes * **EM-8406:** Fixed an issue where the Pending Approvals count on the KEPM Dashboard was reset after a user logged back in. * **EM-8394:** Fixed an issue where expired requests disappeared from the Expired tab after a timeout. * **EM-8385:** Fixed an issue where "All" appeared as a filter result when filtering on the Policy page. * **EM-8384:** Fixed an issue where wildcards were not working in the Targets and Users fields on the dashboard. * **EM-8365:** Fixed an issue where clicking a tile on the KEPM Requests page caused the page to go blank. * **EM-8353:** Fixed an issue with the KEPM Audit Trail to consolidate and correctly display audit entries. * **EM-8349:** Fixed an issue where KEPM filter option dropdowns were cut off by the scrollbar. * **EM-8346:** Fixed an incorrect error state being shown in the Approvals modal. * **EM-8331:** Fixed various UI issues in the Approvals workflow modals. * **EM-8328:** Fixed an issue where individual users could be assigned to Approving Team and Escalated Approvers fields; these fields now accept teams only. * **EM-8324:** Fixed an issue where the escalated request timer did not start after the auto-escalation period expired. * **EM-8322:** Fixed an issue where admin dashboard filters were not correctly reflecting filter names. * **EM-8311:** Fixed a missing "Approving Team" tag in the Admin Console Teams section. * **EM-8308:** Fixed an error occurring when manually adding a custom application in the Admin Console. * **EM-8307:** Fixed an issue where the dashboard time filter incorrectly selected "ALL" when "Last Hour" or "This Week" was chosen. * **EM-8296:** Fixed an issue where the KEPM audit dashboard time filter was not functioning correctly. * **EM-8282:** Fixed an issue where unknown audit event types were being displayed in the KEPM audit log. * **EM-8264:** Fixed multiple display issues in the KEPM Request Detail and Policy Audit views. * **EM-8209:** Fixed an issue where multibyte characters were not displaying correctly in the KEPM agent. * **EM-8167:** Fixed an issue where duplicate-named resources could be created when manually defining a custom resource. * **EM-8155:** Fixed incorrect translations on selected KEPM filter labels. * **EM-8115:** Fixed an issue where overlapping date/time ranges in the policy date filter were not being condensed into a single tag. * **EM-8114:** Fixed an issue where setting an end date prior to the start date in the policy window resulted in an arbitrary start date being set instead of an error message. * **EM-8110:** Removed "Least Privilege" from the filter options on the KEPM Dashboard and KEPM Requests pages. * **EM-8079:** Fixed a limitation preventing Collection reporting exports beyond 20,000 records. * **EM-8078:** Fixed an issue where KEPM Request page headers were truncated on narrower screen widths. * **EM-8074:** Added a prompt when wildcards are selected while enforcing a File Access Policy. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.keeper.io/release-notes/enterprise/admin-console/admin-console-17.7.0.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.