Endpoint Privilege Management

EPM supports your zero-trust journey by enabling your organization to establish a broad user base operating with minimal privileges, while still permitting users to execute tasks authorized by your organization, thus maintaining productivity.

Key features of EPM are as follows:

• Automatic, user-confirmed, or support-approved elevation.
• Insights based on elevation audits.
• Effective control of child processes.
• Rules based on organizational requirements.
• Easy addition or removal of rules.
• Tenant-level enablement, per device rollout.

How to configure EPM

To configure EPM, you need to have the following prerequisites:

1. Microsoft Intune Plan 1 license.
2. Microsoft Entra joined or Microsoft Entra hybrid joined.
3. Microsoft Intune Managed, either as cloud-native or as Configuration Manager co-managed (no workload needs to be shifted to Intune).
4. Clear line of sight to the backend...