Security

It would be extremely beneficial to show in privilege manager for any activation codes used, what was actually launched... if we give out the activation code, we are blind to what they are actually doing behind the scenes.

Privilege manager support would be fantastic for MacOS as there are large gaps with intune and credential management on MacOS. Even just basic support for elevation on demand would be a great first step.

In Carillon we do not allow long activation code validity times. There should be a central place where the allowed times can be configured and which one is the default. e.g. Carillon: ServiceDesk \ ActivationCodeValidityTimes .xml" <?xml versio...

As more people are using passwordless and/or long passwords, when using the run as domain users, writing the password is a bit legacy. Could we use Windows Hello for Business credentials to confirm the elevation without using a password?

I would like to specify rules to control who, what and where actions can be elevated to run with admin privileges