(UB)
Office of the VPCIO
Office of the VPCIO
UB Information Technology
MyUB / HUB
UBmail
Help

Admin By Request

Admin By Request (ABR) is the university’s standard tool for safely providing temporary administrator access on university‑managed computers.

On this page:

Instead of giving permanent admin rights, ABR allows you to perform approved administrative tasks only when needed, for a limited time. This approach protects both you and the university by reducing security risk while still enabling you to get your work done.

ABR is centrally managed by ITCX and supported by your distributed departmental IT team.

Why the university uses Admin by Request

Administrator access is one of the most common targets for cyberattacks. ABR helps protect university systems by:

  • Granting admin access only when required
  • Automatically removing admin rights when tasks are complete
  • Logging and auditing all elevated actions

For you, this means:

  • No waiting for IT staff to enter admin passwords
  • Using your own university account for approved tasks
  • Faster resolution for legitimate admin‑required work

Ways you may receive admin access

For ABR to be installed on your computer, you must first complete the process for requesting administrative access. 

Depending on your specific computing requirements, there are several ways you may have access to ABR’s limited administrative access. The method(s) selected for you will be based off recommendations from your IT support and guided by the Information Security Office’s internal process. The methods of admin access are:

Run As Admin (Most Common)

Use this option when you need to run a single program or installer with admin rights.

Common examples:

  • Installing approved software
  • Running a program that can only function when running with elevated privileges

Note: On macOS, Run As Admin only works on software installation. Any other administrative function on macOS must go through an Admin Session.

Admin Session (Time‑Limited Access)

Use this option when you need to complete multiple admin‑level tasks in a short period of time.

Common examples:

  • Installing several updates
  • Troubleshooting system issues with IT guidance
  • Running as a one-time system utility

PIN Code (offline or special situations)

Use this option when your computer is offline, or normal approval cannot be completed.

How it works:

  1. You request admin access as usual (via one of the methods above)
  2. Your computer generates a 6-digit PIN
  3. You provide that PIN to your IT support team
  4. IT gives you a second PIN to complete approval
  5. ABR verifies that the 2nd PIN is correct
  6. Administrative access is granted based off of the approved method for your device
  7. After initial verification that the 2nd PIN is correct, the PIN expires and cannot be used again

Break Glass Access (Emergency use only)

Break Glass access is reserved for emergency or recovery situations and is initiated by IT.

Examples:

  • Your computer cannot log in normally
  • A system recovery is required

Key points:

  • Credentials are provided directly by IT
  • Access is temporary and automatically removed
  • All Break Glass use is fully audited

What you will see on your computer

The Admin By Request experience depends on your operating system:

  • Windows: System tray icon and approval prompts
  • macOS: Menu bar icon and approval prompts
  • Linux: Graphical or command‑line prompts

You may be asked to:

  • Confirm an action
  • Provide a brief business or academic reason
  • Wait for IT approval

Using Admin By Request on Windows

On Windows computers, Admin By Request integrates directly with familiar Windows security prompts.

How to access ABR features:

  • Look for the Admin By Request icon in the system tray (near the clock)
    • Some (but not all) distributed IT support may also configure a desktop shortcut
  • To elevate a single program, right‑click the application and select Run as Administrator
  • To start an Admin Session, select the Admin By Request icon in the system tray or on your desktop and choose Start Admin Session

What to Expect

  • Windows User Account Control (UAC) prompts are branded by ABR
  • A timer will be shown in the bottom right of your screen during admin sessions
  • Admin rights are removed automatically when the session ends

Using Admin By Request on macOS

On macOS computers, Admin By Request appears in the menu bar at the top of the screen and optionally may appear in the dock, if configured as such by your distributed IT support.

How to access ABR features:

  • Look for the Admin By Request icon in the macOS menu bar
  • Select the icon to request an Admin Session when needed
  • Applications that require elevation will prompt you automatically

What to expect

  • You may be asked to authenticate using your university credentials
  • Admin access is granted only for the approved duration
  • Admin rights are automatically removed when the session ends

Using Admin By Request on Linux

Please work with your  IT support once approved.

Important things to remember

Admin By Request helps balance security and productivity; keeping university systems safe while enabling you to do your work.

  • Admin access is temporary
  • All elevated actions are logged and reviewed
  • Do not attempt to bypass or disable ABR
  • Requests without a clear purpose may be denied

Using ABR responsibly helps keep university systems secure.

Need Help?

If you are unsure which option to choose, are waiting for approval, or cannot complete a task that requires admin access, please contact your local or departmental IT support team. They can assist you directly or escalate to ITCX if needed.