Admin By Request

Admin By Request removes permanent administrator rights from computers and lets people elevate when they need to. Connecting it to Ploy shows you every managed computer, who uses each one, who is still a permanent local administrator, who owns each device, and every time someone elevated to administrator.

Beta. This integration is in beta. The first page of the setup asks you to agree to Ploy capturing redacted error details from Admin By Request if something goes wrong, so we can fix it quickly. Names, emails and other personal details are removed before anything is stored.

What you need

• An Admin By Request portal account that can open Settings.

• About five minutes.

1. Create an API key in Admin By Request

1. Sign in to the Admin By Request portal.

2. Go to Settings, then Tenant Settings, then API Keys.

3. Click Add New and give the key a description such as "Ploy".

4. Click Show on the new key, then Copy to clipboard.

5. On the same page, under About API Keys, note your API prefix, for example https://dc1api.adminbyrequest.com. It tells you which data center your tenant is in.

2. Connect it in Ploy

1. In Ploy, go to Integrations, find Admin By Request and click Connect.

2. Tick the beta consent box.

3. Under Select your data center, pick the one matching your API prefix (for example dc1api is Europe, Netherlands).

4. Paste the API key.

5. Click Test connection, then Save.

If the test says the key was not accepted, check the key is still active in Admin By Request and that the data center matches the API prefix exactly.

What Ploy shows

• Devices: every computer running the Admin By Request client, with its operating system, client version, serial number and local administrators.

• Who uses each device: the person signed in to it, marked as a Local administrator if they still hold permanent admin rights, and its Device owner.

• Elevations: each time someone ran something as administrator or started an admin session in the last 30 days, in the person's activity feed, plus when they last used Admin By Request.

Admin By Request's API does not list the admins who use the Admin By Request portal, so they do not appear in Ploy yet.

What Ploy can change

On a device in Ploy:

• Grant access makes the person currently signed in to that device its owner.

• Remove access releases the device's owner, so the next person to sign in becomes the owner.

Ploy does not change who is a local administrator, and it does not approve or deny elevation requests. Those stay in Admin By Request.

How often Ploy checks

Every 6 hours.