Key Capabilities / Features

In 2023 Delinea added key updates to Privilege Manager.

First, Privilege Manager delivers significantly improved usability for customers by preconfiguring five of the most common privilege elevation policies through the solution’s Workstation Policy Framework to simplify implementation and accelerate time to value. The five preconfigured policies include Malware Attack Protection, Allow Microsoft Signed Security Catalog , Software Development Tools, Visual Studio Installers, and Capture Application Elevation Attempts. Existing customers can compare their policies with the framework and introduce those that may be missing in their environments.

Another major enhancement provides granular control over the ability to add, modify or delete users on workstations through PowerShell, even in PowerShell sessions with fully elevated privileges. This reduces the risk of developers and IT administrators abusing PowerShell’s capabilities and can lessen the impact of malicious code and ransomware. Such granular control of add, modify, and delete operations also significantly reduces the risk of lateral movement by a bad actor.

Additional enhancements optimize just-in-time (JIT) access for users on Windows workstations, and for macOS workstations, application control is expanded to enable elevated access only for certified or trusted publishers and intelligently enables “silently elevated” privileged access when needed. Privilege Manager also enhanced protection policies for macOS that intelligently allow developers and power users to perform common elevated Sudo commands that should have access but restrict non-standard activities that may indicate a potential compromise. The privilege elevation is done silently, without interrupting the user’s productivity or the need to request privileges for common tasks.

How we are different

• Privilege Manager implements and enforces least privilege by removing excess privileges and permanently controls which accounts are members of any local group. Privilege Manager continuously discovers applications and processes tied to privileged accounts, protecting IT systems with just in-time access and grant privileges for a limited time and on an as-needed basis.
• Based on Delinea’s deep expertise and customer feedback, the new Workstation Policy Framework includes five of the most common policies to help customers quickly build a foundation for privileged access controls and create a baseline of security on Windows and Mac workstations without disrupting user productivity.
• Users can create granular application control policies giving employees access to use applications they need to do their jobs, without requiring local admin rights, and enables central, policy-based controls with threat intelligence and allow and deny lists.