Run with privilege as an alternate user
If your administrator has enabled the group policy for this feature and assigned you to a role with rights for a specific application, you can run the application with elevated privileges of an alternate user.
For example, if your user account doesn't have privileges to install an application on the computer but your administrator does, you can stay logged in and run the application with privilege and your administrator can enter her credentials so that you can install the application.
To run a local application as an alternate user:
- Navigate to and select the application you want to run.
(If you want to open the application from the Start menu, press the Shift key when you right-click.)
If you have not been assigned to any role that has application access rights for the application you are trying to open, a message displays to inform you that you are not a member of any role associated with the selected application.
The Centrify Run with Privilege dialog box displays. (If it doesn't display, it's because you're assigned to just one role, so there's no need to select a role.)
Note: Note: If you pressed the Shift key when you right-clicked the application in Step 2, the Centrify Run with Privilege dialog box displays even if you're assigned to no roles or just one role for access to that application.
To specify the alternate user, click Change User and specify the alternate user account.
When prompted, enter the alternate user's login credentials to authenticate as that user.
The dialog box now lists the alternate user and the roles assigned to that account.
Select the desired role.
- If your administrator has configured the system to re-authenticate, enter the alternate user's credentials again and click OK.
- If your administrator has enabled multi-factor authentication, complete the additional authentication challenge.
If you'd prefer to use your environment variables instead of the variables that are associated with the alternate user, select Use current environment variables instead of "Run As" user's.
For example, this option is useful if you're installing a program that's dependent on one that you've installed and is set in your path variable
After you've successfully authenticated with the alternate user's credentials, the application opens and an audit trail event is recorded in the Windows Application event log. You can use the application with the privileges granted to the specific user account. You have the privileges associated with the specified user account until you exit the application.