This article gives an overview of Admin By Request, the system being introduced on university-managed computers (Windows and Apple macOS) to securely handle just-in-time administrative requests.

Some Windows users may need additional (administrative) permissions in order to carry out their University Business. This article describes how to request these elevated permissions, and how Admin By Request then manages them on your behalf.

Please note: the vast majority of our users will never need to use this service.

Before manually installing any software, staff and students should:

• Windows users: look into the university Software Center through the shortcut on your desktop
• Apple macOS users: look into Jamf Self Service through the shortcut on your desktop

Introduction

Throughout 2024-25, we will be gradually making an Endpoint Privilege Manager available across workstations and university devices. This important security enhancement means we can give staff any additional permissions they may need on their device in a more secure way than current local administrator rights allow.

The system we have chosen is called "Admin By Request". This article contains all the information you need to understand how to use this software on your device, should you need to.

If you wish to know more about the project, and what it means to you, please see the iSolutions SharePoint page "AdminByRequest" for more information.

---

Back to the top

 

How to use Admin By Request on Windows computers

Installing an item of software

Before starting

Before starting, be sure you have already installed Admin by Request from Software Center on your university-owned device. Find more information about administrator rights in the article "Administrator account and rights on university-owned computers".

Step-by-step instructions

1. Double-click the software that you need to install:

Some software may require you to right-click and choose "Run as administrator" instead:

3. Confirm your sign-in request through Microsoft "Multi-Factor Authentication" (MFA).

MFA uses the same method as other University systems and is in place to increase security for you and the University. It prevents the following scenarios:

• "drive-by" installations - this happens someone walking up to your unlocked workstation and installing an item of software 
• "phished" passwords - this happens when your username and password have both been stolen and are known to someone who intends to gain access to University systems by installing malware

Occasionally you will be reminded of the Code of Conduct:

4. Your software will then run as you would expect.

 

Running a series of administrative tasks

If you need to run a series of administrative tasks, a simple "run as administrator" is not sufficient. In this case, you can request to start an administrator session using Admin By Request.

You will need to confirm your identity through MFA just one time. The session is time-limited, though you can end it in advance.

Step-by-step instructions

1. Go to the taskbar and select the Admin By Request system tray icon

2. Choose Request administrator access from the menu that appears

3. You will need to approve your sign-in through the Multi-Factor Authentication request:


4. Occasionally you will see a Code of Conduct text. This Code is slightly different from the other one because you will temporarily become the administrator of your machine:

5. You will then see a dialog box showing you that you have an administrative session. This box sits above the system tray icon and gives you a countdown of how long you have left:

If you still have more work to do at the end, you can simply start a new session.



6. You can finish your session before the automatic time-out by selecting Finish.

You will be prompted to confirm that you meant to do so:

Select Yes to confirm your choice. At the end of any administrative session, any still-elevated processes will be closed.

---

Back to the top

 

How to use Admin By Request on Apple macOS computers

Installing an item of software

Certain macOS tasks (for example installing a .pkg file) automatically trigger Admin By Request to activate its "Run as administrator" function.

The screenshots were taken during the installation of XQuartz and are used as examples.

Step-by-step instructions

1. Open the package installer as normal and progress through any dialog boxes that it displays:

 

2. When administrative privileges are required, Admin By Request will automatically:

1. Intercept the request 
2. Replace the built-in Apple dialog box with its own. 

3. You will need to approve your sign-in through the Multi-Factor Authentication request:


4. Occasionally you will be reminded of the Code of Conduct:

5. The installer will then continue and complete as normal:


 

 

Running a series of administrative tasks

If you need to run a series of administrative tasks, a simple "run as administrator" is not sufficient. In this case, you can request to start an administrator session by using Admin By Request.

You will need to confirm why you are running the administrative session just one time. The session is time-limited, though you can end it in advance.

Step-by-step instructions

1. Launch Admin by Request

2. On the menu bar, select the Admin By Request icon

3. Select Request administrator access from the drop-down menu:

4. You will be asked to confirm that you meant to start an administrative session:


5. You will need to approve your sign-in through the Multi-Factor Authentication request:


6. Occasionally you will see a Code of Conduct text. This Code is slightly different from the other one because you will temporarily become the administrator of your machine:

7. You will then see a dialog box showing you that you have an administrative session. This box gives you a countdown of how long you have left:

If you still have more work to do at the end, you can simply start a new session.



8.Your account will then become temporarily administrative. It can be used as normal to carry out the task and any subsequent ones.

The example below show the installation of Blender on an Apple computer:

9. You can finish your session before the automatic time-out by selecting the Finish button:

10. You will be prompted to confirm that you meant to do so. Select Yes to confirm your choice:

 At the end of any administrative session, any still-elevated processes will be closed:

---

Back to the top

 

Getting IT help

If you need help, please contact ServiceLine or visit one of our Tech Hubs.

---

Back to the top

 

Related content

Admin By Request - SharePoint website

Administrator account and rights on university-owned computers

How to download software

How to set up and manage Microsoft Multi-Factor Authentication (MFA)