{"id":5569,"date":"2022-12-16T04:08:00","date_gmt":"2022-12-16T04:08:00","guid":{"rendered":"https:\/\/www.adminbyrequest.com\/?p=5569"},"modified":"2026-01-25T07:49:36","modified_gmt":"2026-01-25T07:49:36","slug":"privileged-access-management-just-got-personal","status":"publish","type":"post","link":"https:\/\/www.adminbyrequest.com\/en\/blogs\/privileged-access-management-just-got-personal","title":{"rendered":"Privileged Access Management Just Got Personal."},"content":{"rendered":"\n

A Conference, a Presentation, and a Big Idea<\/h2>\n\n\n\n
\"\"\/<\/figure>\n\n\n\n

In October 2022, we were fortunate enough to be given an opportunity to present our Admin By Request solution to delegates of the 2022 European Cloud Summit, in the wonderful German city of Mainz.<\/p>\n\n\n\n

The night before our \u2018Why Admin By Request is the world\u2019s best solution for managing Local Admin rights\u2019 presentation, the team gathered in the hotel bar for a few pre-presentation bottles of the local Eisgrub-Br\u00e4u.<\/p>\n\n\n\n

As the conversation (& Br\u00e4u) flowed, it became apparent as we flicked through slide after slide of product features, there was a crucial message missing from the presentation.<\/p>\n\n\n\n

Flexibility is Everything<\/h2>\n\n\n\n

Admin By Request is a Privileged Access Management (PAM) solution with a laser focus on Local Admin Rights Management. The feature set is extensive, but if you park those for a moment, and instead consider how everything can be \u2018blended\u2019 together, you will come to the same conclusion as we did that night in Mainz.<\/p>\n\n\n\n

Ultimately, it\u2019s the products configurability and therefore flexibility \u2013 not individual features, which makes Admin By Request the knockout solution for any organisation needing to both lock down Local Admin Rights, whilst still keeping the end user experience breezy and highly productive.<\/p>\n\n\n\n

A great PAM solution we concluded, must work for everyone, because in the end, it\u2019s \u2018working for everyone\u2019 that determines whether a PAM solution implementation will be successful, or even if it gets implemented at all.<\/p>\n\n\n\n

The central proposition of our Cloud Summit presentation was hastily changed to \u2018We Work For Everyone!\u2019 \u2013 but soon after coming up with this pithy one liner, we realised that our rather bodacious claim would instantly be met with a heckle from the audience of \u2018Oh yeah? Prove it!\u2019.<\/p>\n\n\n\n

Customer Product Demos are Focus Groups<\/h2>\n\n\n\n

A product demo is not simply a product presentation, but also a valuable opportunity to listen and learn about customer challenges. Discovering how a customer\u2019s IT team have tried to address the Local Admin rights problem up to that point (without Admin By Request) is almost as interesting to us as showing them how Admin By Request can do a much better job of it.<\/p>\n\n\n\n

Going over our past years\u2019 demo notes, we noted several near identical \u2018use cases\u2019 which again and again, customers presented to us as challenges which needed to be overcome.<\/p>\n\n\n\n

We worked these uses cases to build our \u2018we work for everyone\u2019 proposition and re-wrote the presentation in such a way that we first demonstrated each use case, and then followed it up by showing the recommended configuration of Admin By Request that solved that specific need.<\/p>\n\n\n\n

Newsflash: Users Use Software!<\/h2>\n\n\n\n

The problem was, the terms \u2018use case\u2019, or \u2018usage scenario\u2019 bothered us, because these are cold and soulless words and not a good representation of the type of work we do here at FastTrack Software.<\/p>\n\n\n\n

It is central to our philosophy to always be mindful of what exactly is doing the using in a \u2018use case scenario\u2019. It\u2019s a person; a real human, and therefore it\u2019s our sole aim to engineer software solutions to improve (not interfere with) working lives.<\/p>\n\n\n\n

The idea then came, to communicate each privilege elevation scenario as a \u2018personality\u2019. This approach would not only make explaining each scenario a little more human, but also enhance \u2018relativity\u2019 and memorability too!<\/p>\n\n\n\n

Thus, the concept of \u2018usage personas\u2019 was born, and the outcome was a very effective, personality-focused presentation to delegates at the European Cloud Summit.<\/p>\n\n\n\n

This also happened to be the very first presentation appearance of the FastTrack Software Unicorn (our unofficial company mascot) a character which (as you will see) has inspired us to visualise some of Admin By Request\u2019s most magical abilities!<\/p>\n\n\n\n

What DO Admin Rights Requests Look Like?<\/h2>\n\n\n\n

Based on our many customer consultations we formulated the following shortlist of \u2018personas\u2019 that best reflect the most common type of Admin Rights requests that IT departments in today\u2019s modern businesses need to deal with.<\/p>\n\n\n\n

The task of making these personas easily identifiable was a bit tricky, until we thought to enlist our company mascot to help us out.<\/p>\n\n\n\n

Do any of these personas relate to scenarios in your organisation? If so, Admin By Request has a key feature to tackle each one. You can configure Admin By Request to meet the needs of one, some, or all of these personas, and apply them to multiple different groups of users or computers, all concurrently.<\/p>\n\n\n\n

1. Pop!<\/strong><\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Identification: Users that \u2018pop up\u2019 needing Admin Rights for an application. High volume, unpredictable, always urgent. \u2018Pops\u2019 are a huge drain of business productivity (both in the IT department and on the user side), the impact of which is typically hidden in the haze of day-to-day operations, and as such, the cost drag of \u2018Pop\u2019 activity on the business is very much underestimated.<\/p>\n\n\n\n

Key Admin By Request Feature: Run As Admin with Approval Mode Enabled.<\/p>\n\n\n\n

2. Robo<\/strong><\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Identification: Typically found in industrial, scientific, and academic institutions, where there is a need for automated rights to securely elevate permissions for specific applications only, under full audit and whilst locking down all other admin access.<\/p>\n\n\n\n

Key Admin By Request Feature: Per-Application Pre-Approval with no user confirmation.<\/p>\n\n\n\n

3. Hero<\/strong><\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Identification: Heroes working in helpdesk departments still need to comply with Local Admin rights restrictions on their own computers, but at the same time, need fully audited admin rights to fix issues on the end user systems they are responsible to support.<\/p>\n\n\n\n

It\u2019s a big internal security concern if your internal helpdesk staff have global, unaudited local admin rights access on all systems from Intern to CEO.<\/p>\n\n\n\n

Key Admin By Request Feature: Support Assistance Mode.<\/p>\n\n\n\n

4. Whiz<\/strong><\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Identification: Dev wizards demand full admin rights to work their magic, so you need a means to provide them with higher privileges, \u2018Just-In-Time\u2019, fully audited, but also a capability to add in some checks and restrictions. What is key however is the need to maintain your developer\u2019s full productivity (and happiness) with their development environment. No one wants an angry wizard on their team so it\u2019s important that your Local Admin rights solution should be both powerful and highly responsive.<\/p>\n\n\n\n

Admin rights should magically appear with a mere flick of a wrist. Elevato VStudio!<\/p>\n\n\n\n

Key Admin By Request Feature: Time-Limited Admin Sessions with selective blocking and tamper protection.<\/p>\n\n\n\n

5. Oops!<\/strong><\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

Identification: Accidents happen, just that when they involve users being locked out of their systems, an \u2018Oops!\u2019 can really ruin your day. This persona is also the most likely to cascade into much bigger headaches. For example, return laptop back to base, courier loses laptop, now you also have a potential data leak issue, insurance claim etc.<\/p>\n\n\n\n

Key Admin By Request Feature: Break Glass (Enhanced LAPS feature).<\/p>\n\n\n\n

Interested To Know More? Let\u2019s Get Personal!<\/h2>\n\n\n\n

Each of our Admin Rights personalities illustrated above have their own more detailed & dedicated write up, and they are all structed as follows:<\/p>\n\n\n\n

First, we\u2019ll introduce the \u2018traits\u2019, to help you zero-in and identify if the personality matches a use case you can relate to.<\/p>\n\n\n\n

Next, we will cover some common techniques which organizations have chosen to remedy the challenges of the persona, without the benefit of Admin By Request. We will also highlight problems and challenges of each of these fudgy workarounds.<\/p>\n\n\n\n

Finally, we will demonstrate how Admin By Request can be configured to perfectly address the need of the persona \u2013 something we feel will enable you to immediately see the benefits and therefore value of the solution vs other methods.<\/p>\n\n\n\n

We will be publishing these per-persona write-ups throughout December 2022, so what better reason would we have to start the run up to Christmas with a POP!<\/p>\n\n\n\n

\"\"\/<\/figure>\n","protected":false},"excerpt":{"rendered":"

The terms \u2018use case\u2019 or \u2018usage scenario\u2019 are cold and soulless words and not a good representation of the type of work we do here. Introducing \u2018Usage Persona\u2019: a more human approach to use case scenarios.<\/p>\n","protected":false},"author":2,"featured_media":7836,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[69,67,68,71,72],"ppma_author":[16],"class_list":["post-5569","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-blogs","tag-admin-persona","tag-pam","tag-privileged-access-management","tag-usage-scenario","tag-use-case-scenario","entry","has-media"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t