Skip to main content
Guru
November 20, 2024

JIT Admin Request.

  • November 20, 2024
  • 15 replies
  • 402 views

I was running over the documentation and could not find how to enabled the JIT Admin request, so here a short GIF of how to enable.

 

15 replies

tclowater
BeyondTrust Employee
BeyondTrust Employee
November 21, 2024

I do not see this option for Mac OS (template based ) policy. It is available in Windows policy though. 

JIT Admin hasn’t yet been released for Mac (likely today release with 24.7)

Would that require an additional update of the PM Cloud, as I do not see an option to configured it similar to Windows.

I think you and I will find out at the same time when the release notes come out 😅

So the release notes state that it’s available with the 24.7 MacOS, and checking my lab (albeit different version than 24.7) I do see the Workstyle option to enable JIT admin on the Mac workstyles the same way you would on the Windows side of the house. 

No, I would assume that the PM Cloud need another upgrade to add the feature to the WPE for Mac.

TL;DR it doesn’t need another upgrade but will be available generally soon - will update when it’s available. 

Guru
November 22, 2024

OK, My Mac updated and is now running 24.7.0.1 deployed from the package manager.

Yet the option on the WPE is not there. As I am an impatient person I tried faking it into the policy using the same XML as for enabling it on the Windows side. “<JITAdmin Enabled="true" />” but it does not work either. So waiting patiently on the WPE to have my functions.

 

tclowater
BeyondTrust Employee
BeyondTrust Employee
November 22, 2024

OK, My Mac updated and is now running 24.7.0.1 deployed from the package manager.

Yet the option on the WPE is not there. As I am an impatient person I tried faking it into the policy using the same XML as for enabling it on the Windows side. “<JITAdmin Enabled="true" />” but it does not work either. So waiting patiently on the WPE to have my functions.

 

Feature flag should be enabled for EPM-Cloud for all tenants now for JIT Admin on Mac now. If it’s not there, I’d recommend contacting support. 

Guru
November 22, 2024

May I add that the documentation could need the information about when and Admin sessions ends on both Windows and Mac you get logged off.

tclowater
BeyondTrust Employee
BeyondTrust Employee
November 22, 2024

May I add that the documentation could need the information about when and Admin sessions ends on both Windows and Mac you get logged off.

The documentation does state that you get logged off, however will request that it’s bolded

 

JIT Admin access settings ← bottom of the page