Admin By Request - 2026 Pricing, Features, Reviews & Alternatives

Admin By Request is an endpoint privilege management solution that enables organizations to manage, monitor, and control local admin rights across Windows, macOS, and Linux devices. Built on the principle of least privilege, it eliminates the need for users to have standing administrative access.

Instead, it provides temporary, audited elevation only when necessary, minimizing the attack window and reducing the risk of account compromise and lateral movement.

Just-In-Time Privilege Elevation

At the core of Admin By Request is just-in-time privilege elevation. Users can elevate privileges in two ways: per-application elevation grants temporary admin rights to a single application or installer without elevating the entire user session, keeping the process sandboxed. Session elevation provides time-limited, system-wide administrative access for tasks requiring broader permissions, such as installing drivers or changing system settings. Both methods are fully audited, with all activity (including applications run, installations performed, and session duration) logged for compliance and security review.

Flexible Approval Workflows

Organizations can configure approval workflows to match their security policies. Requests can require IT approval, require a business reason from the user, or be pre-approved based on application vendor or checksum. Applications can also be blocklisted to prevent elevation entirely, giving IT teams granular control over what software can run with elevated privileges.

Break Glass Emergency Access

For emergency situations such as a broken domain trust relationship or temporary server access for consultants, Admin By Request offers Break Glass accounts. These temporary, one-time-use local administrator accounts feature automatically generated complex credentials, must be used within an hour of creation, and are automatically removed on reboot. This provides a secure alternative to Microsoft LAPS, with passwords stored securely in the portal rather than in plain text alongside Active Directory records.

Secure Remote Access

Admin By Request includes secure remote access capabilities. Remote Support enables IT teams to connect to endpoints for screen sharing and remote control via secure Cloudflare tunnels, with sessions initiated by either the admin or end user. Unattended Access allows browser-based remote connections to servers and network devices without requiring a user to be present, supporting both cloud-hosted and self-hosted on-premise gateway deployments. Vendor Access extends secure connectivity to third-party vendors, allowing access to internal resources through a browser without additional software. All remote sessions are audited and can be recorded for review.

Centralized Management and Auditing

The web portal provides centralized management across all endpoints. Administrators can configure global settings or create granular sub-settings for specific Active Directory, Entra ID, Google Identity, JumpCloud, or Okta groups. A comprehensive audit log captures all privileged activity, and email notifications can be configured for approval requests, malware detection, and other events. Privacy controls support compliance with data protection requirements by allowing organizations to anonymize data collection.

Additional Capabilities

Admin By Request also provides real-time anti-malware file scanning during elevation requests, complete software and hardware inventory across managed endpoints, and integration with SIEM tools and ticketing systems. The solution deploys via standard installation methods or MDM platforms like Intune and Jamf, and operates with minimal resource consumption once installed.