Body
Summary
If you require ongoing administrative rights to your workstation, you’ll use the BeyondTrust Endpoint Management tool, also known as the Privileged Access Management (PAM) tool.
Before submitting a request for PAM access, please review the training video and transcript provided below. You will be required to confirm completion when submitting your Privileged Access Management (PAM) Service Request.
Video Training
Please review the following video in order to complete the BeyondTrust EndPoint Privileged Access Management training requirement:
Transcript
Welcome to the BeyondTrust Privileged Access Management tool. This tool allows you to temporarily raise your level of privilege to perform administrative actions on your workstation; this allows you to install or uninstall programs, run elevated command prompts, and other, similar actions without being an administrator on your computer.
Please remember that this tool is intentionally configured to be flexible, giving its users a high degree of discretion. However, actions taken by this tool are audited and periodically reviewed by Enterprise Technology & Services. Certain applications can be blocked or access to the tool can be revoked if it is not used in a way that is aligned with the mission of USNH and/or the Acceptable Use Policy.
Installing the tool
Once approved for use, your university-managed workstation will have the BeyondTrust Privileged Access Management tool deployed remotely. Please allow up to 1-2 business days for this to occur. You can tell if the tool is installed by going to your system tray in the lower-right corner of your screen and looking for the BeyondTrust icon. You can also right-click this icon to see details about the tools and even check to see if there are any revisions to policy available.
Using the BeyondTrust Privileged Access Management Tool
Using the tool itself is fairly simple and straightforward. To install a program on a Windows-based device, simply proceed as you normally would. Double-click the icon wherever it resides, such as on your Desktop or Downloads folder, and follow the new prompts. In our demo environment, we are seeing some extra details, so your screen might look slightly different.
To install a program on MacOS, usually you would drag and drop the icon to the Apps folder. Instead, we're going to do a right-click and choose "Install with Privilege Management." Again, our demo environment might be a little different from how it will look on your screen, but the idea is the same.
Running with elevated privilege
When an application needs to run with elevated privilege on Windows, you will get a prompt requesting an explanation of why you need escalation as well as a prompt to input your username and password. For this demonstration, we are running an elevated command prompt.
On MacOS, it works a little differently. Instead, the Mac will wait until you need the privilege and will request elevation inline. In this demonstration, I am running a simple sudo command within Terminal. The request for confirmation is within the terminal window, and I need to type "Yes" and pretty Return in response.
Conclusion
This concludes the BeyondTrust Privileged Access Management training session. If you need assistance with the tool, please visit USNH.edu/it to reach our Knowledge Base or to contact the Help Desk.
Next Steps
Use the Privileged Access Management (PAM) Service request to request your PAM access.
Need additional help?
To submit a support request, please fill out the Computer and Device Support webform with as much detail as possible, or contact the Technology Help Desk team on your local campus. For password issues you must call or visit the Help Desk in person.