This page will document how elevated permissions are requested via a HALO request, and user access is allocated using Endpoint Privilege Management (EPM). EndPoint Privilege Management allows users with standard permissions to elevate their rights to install or run applications with administrative rights. It does not replace local administrator rights. It also does not change organisationally managed settings of filesystem permissions.
Pre-requisites
You must be using a Windows UMD device
You must be the primary user of the device
Check your device is correctly categorised in the Company Portal because the EPM group the user is added to in Blue Toolkit must match the device category assigned in the Company Portal.
to check this, Open the Company Portal, click, Home, THIS DEVICE and under Device information confirm what is set for the Device Category
How to Elevate Permissions
Find the application you want to run by navigating to the appropriate folder e.g. C:/Program Files/Notepad++
This can also be achieved by right-click the App icon and select “Open File Location”
NB it is advisable to turn on File Extensions as shown below which allows you to easily identify the file type
Right-click on the executable
Select Run with elevated access
If at this stage you see the below error message, it means elevated access has not yet been allocated. Please contact the CSCS Service Desk for assistance.
Enter your business justification and click “Continue”. The better quality and comprehensive justifications will be used to create rules so the next time you perform the same action you will not be required to authenticate or enter a justification.
NB it is worth copying your business justification because you will need to enter it each time you elevated permissions for the same application
Authenticate the action with the account running the elevation and click OK.
Further Reading
Elevated permissions for University Managed Desktops (UMDs) | IT Help and Support