Skip to main content

JIT Admin Request.

  • November 20, 2024
  • 15 replies
  • 322 views

Forum|alt.badge.img+4

I was running over the documentation and could not find how to enabled the JIT Admin request, so here a short GIF of how to enable.

 

15 replies

Forum|alt.badge.img+4
  • Author
  • Veteran
  • November 20, 2024
Vanish from above

 


  • BeyondTrust Employee
  • November 20, 2024

Very nice, thank you for this ​@Jens Hansen!

 

I haven’t seen a KB for it yet, but for reference here is our documentation within the admin guide: JIT Admin access settings


Forum|alt.badge.img+1
  • Veteran
  • November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 


tclowater
BeyondTrust Employee
  • BeyondTrust Employee
  • November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 

JIT Admin hasn’t yet been released for Mac (likely today release with 24.7)


Forum|alt.badge.img+4
  • Author
  • Veteran
  • November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 

JIT Admin hasn’t yet been released for Mac (likely today release with 24.7)

Would that require an additional update of the PM Cloud, as I do not see an option to configured it similar to Windows, or will it be there once the Client 24.7 is in PM Coud?


tclowater
BeyondTrust Employee
  • BeyondTrust Employee
  • November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 

JIT Admin hasn’t yet been released for Mac (likely today release with 24.7)

Would that require an additional update of the PM Cloud, as I do not see an option to configured it similar to Windows.

I think you and I will find out at the same time when the release notes come out 😅


Forum|alt.badge.img+4
  • Author
  • Veteran
  • November 21, 2024

Very nice, thank you for this ​@Jens Hansen!

 

I haven’t seen a KB for it yet, but for reference here is our documentation within the admin guide: JIT Admin access settings

Awesome, none of that worked yesterday when I was trying to find it.
And just to add, if you can do it without the documentation, you have succeeded in making an awesome feature.


tclowater
BeyondTrust Employee
  • BeyondTrust Employee
  • November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 

JIT Admin hasn’t yet been released for Mac (likely today release with 24.7)

Would that require an additional update of the PM Cloud, as I do not see an option to configured it similar to Windows.

I think you and I will find out at the same time when the release notes come out 😅

So the release notes state that it’s available with the 24.7 MacOS, and checking my lab (albeit different version than 24.7) I do see the Workstyle option to enable JIT admin on the Mac workstyles the same way you would on the Windows side of the house. 


Forum|alt.badge.img+4
  • Author
  • Veteran
  • November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 

JIT Admin hasn’t yet been released for Mac (likely today release with 24.7)

Would that require an additional update of the PM Cloud, as I do not see an option to configured it similar to Windows.

I think you and I will find out at the same time when the release notes come out 😅

So the release notes state that it’s available with the 24.7 MacOS, and checking my lab (albeit different version than 24.7) I do see the Workstyle option to enable JIT admin on the Mac workstyles the same way you would on the Windows side of the house. 

No, I would assume that the PM Cloud need another upgrade to add the feature to the WPE for Mac.


tclowater
BeyondTrust Employee
  • BeyondTrust Employee
  • November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 

JIT Admin hasn’t yet been released for Mac (likely today release with 24.7)

Would that require an additional update of the PM Cloud, as I do not see an option to configured it similar to Windows.

I think you and I will find out at the same time when the release notes come out 😅

So the release notes state that it’s available with the 24.7 MacOS, and checking my lab (albeit different version than 24.7) I do see the Workstyle option to enable JIT admin on the Mac workstyles the same way you would on the Windows side of the house. 

No, I would assume that the PM Cloud need another upgrade to add the feature to the WPE for Mac.

Will follow up and let you know :) 


tclowater
BeyondTrust Employee
  • BeyondTrust Employee
  • November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 

JIT Admin hasn’t yet been released for Mac (likely today release with 24.7)

Would that require an additional update of the PM Cloud, as I do not see an option to configured it similar to Windows.

I think you and I will find out at the same time when the release notes come out 😅

So the release notes state that it’s available with the 24.7 MacOS, and checking my lab (albeit different version than 24.7) I do see the Workstyle option to enable JIT admin on the Mac workstyles the same way you would on the Windows side of the house. 

No, I would assume that the PM Cloud need another upgrade to add the feature to the WPE for Mac.

TL;DR it doesn’t need another upgrade but will be available generally soon - will update when it’s available. 


Forum|alt.badge.img+4
  • Author
  • Veteran
  • November 22, 2024

OK, My Mac updated and is now running 24.7.0.1 deployed from the package manager.

Yet the option on the WPE is not there. As I am an impatient person I tried faking it into the policy using the same XML as for enabling it on the Windows side. “<JITAdmin Enabled="true" />” but it does not work either. So waiting patiently on the WPE to have my functions.

 


tclowater
BeyondTrust Employee
  • BeyondTrust Employee
  • November 22, 2024

OK, My Mac updated and is now running 24.7.0.1 deployed from the package manager.

Yet the option on the WPE is not there. As I am an impatient person I tried faking it into the policy using the same XML as for enabling it on the Windows side. “<JITAdmin Enabled="true" />” but it does not work either. So waiting patiently on the WPE to have my functions.

 

Feature flag should be enabled for EPM-Cloud for all tenants now for JIT Admin on Mac now. If it’s not there, I’d recommend contacting support. 


Forum|alt.badge.img+4
  • Author
  • Veteran
  • November 22, 2024

May I add that the documentation could need the information about when and Admin sessions ends on both Windows and Mac you get logged off.


tclowater
BeyondTrust Employee
  • BeyondTrust Employee
  • November 22, 2024

May I add that the documentation could need the information about when and Admin sessions ends on both Windows and Mac you get logged off.

The documentation does state that you get logged off, however will request that it’s bolded

 

JIT Admin access settings ← bottom of the page