Skip to content

Update Admin Approval dialog scenarios in documentation #1196

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
PP-IvanDem wants to merge 4 commits into
base: dev
Choose a base branch
from
Open

Update Admin Approval dialog scenarios in documentation #1196

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
593c0b1
Update Admin Approval dialog scenarios in documentation
PP-IvanDem Jul 3, 2026
2d33405
fix(vale): auto-fix style issues (Vale + Dale)
github-actions[bot] Jul 3, 2026
c273bc3
docs: apply fixes from PR review
github-actions[bot] Jul 3, 2026
84c3937
fix(vale): auto-fix style issues (Vale + Dale)
github-actions[bot] Jul 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 11 additions & 13 deletions ...k/components/leastprivilegemanager/technotes/tipssecurerun/adminapprovalwork.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,26 +4,24 @@ description: "How does the option \"Show Admin Approval dialog for untrusted app
sidebar_position: 90
---

# How does the option "Show Admin Approval dialog for untrusted application" in Admin Approval work?
# How the "Show Admin Approval dialog for untrusted application" option in Admin Approval works

If the Show Admin Approval dialog for untrusted applications is enabled,then the decision on whether
If the Show Admin Approval dialog for untrusted applications is enabled,then the decision on whether
to show the Admin Approval dialog will work, as it has done up to version 23.6.3571. In other words,
the Admin Approval dialog will be shown for untrusted applications and/or any applications requiring
the Admin Approval dialog appears for untrusted applications and/or any applications requiring
elevation.

As of CSE version 23.8.xxxx and higher, if the **Show Admin Approval dialog for untrusted
applications** is disabled,then the decision on whether to show the Admin Approval dialog will be
based on the following:
applications** is disabled,then the following determines whether to show the Admin
Approval dialog:

SCENARIO 1: If SecureRun is disabledthen the Admin Approval dialog must notbe shown.
SCENARIO 1: If SecureRun is disabled, the **Show Admin Approval dialog for untrusted applications** option makes no difference. The Admin Approval dialog will not appear for processes based on the file's owner (image file ownership). It will still appear for processes that require elevation.

SCENARIO 2: If SecureRun is enabled:
SCENARIO 2: If SecureRun is enabled:

- If the file is owned by an untrusted principal and elevation is not required, then the Admin
Approval dialog will notbe shown, and it will be blocked by SecureRun.
- If elevation is required, then Admin Approval will be shown, regardless if the file is owned by a
trusted principal or not.
- If an untrusted principal owns the file and elevation isn't required, then the Admin
Approval dialog doesn't appear, and SecureRun blocks it.
- If elevation is required, then Admin Approval appears, regardless of whether a trusted principal
owns the file.

![977_1_image-20230824223216-1_950x550](/images/policypak/leastprivilege/securerun/977_1_image-20230824223216-1_950x550.webp)