Requesting the ability to have the "Consent Required" slider be enabled by default. Possibly as an option in the agent builder?
Meaning all devices with access agents require guest consent before connecting, unless administrative user with "Administer" and "EditSession" permissions updates this.
I agree with Cole. I actually came here to see if there was a way to mass enable this so Consent Required is on for all my devices.
Here is my reason - I have a couple of levels of techs where Role Base is fine. They are set up so that they have to get consent or wait for the 60 second time out. Or, if there is no one logged in, they can get on right away.
However, I have some senior techs that have higher security responsibilities and many need to get on the machine at any time, with or without consent. However, I still need them to be polite for non-security emergencies and want to make sure they prompt for consent when they connect, especially when connecting to senior management.
Having the slider sent to enabled by default enables me to ensure the senior security techs do not mistakenly connect to someone without consent. I want them to have to do the extra steps of turning off the consent requirement only if it is a critical issue.
So, is there a way to have this enabled by default, or a process where I can regularly run a script or something that enables this for all my computers incase the techs forget to turn it off?
Sean, great question. I do currently do this via custom attribute 5 and a session group filtering for = 1. However, being that the consent required slider now exists I cannot imagine I am the only person who would benefit from this option.
I also really like that consent required does not respect the hostsessionwithoutconsent permission and still required the guest to grant consent. Hope this answers your question, thank you!
This is something we could look at in the future, but I am curious why this method would be preferred over setting up Role Based permissions with Consent Required for some groups and not others?
I agree as well. This is precisely the reason I came to the forum as well.
Jordan explained it perfectly:
"Having the slider sent to enabled by default enables me to ensure the senior security techs do not mistakenly connect to someone without consent. I want them to have to do the extra steps of turning off the consent requirement only if it is a critical issue."
I would also like to request this be made available.