Providing on-demand access to a restricted resource of a user device
Examples described herein include systems and methods for providing on-demand access to a restricted resource of a user device. An example method can include generating a profile that specifies a restricted resource and one or more conditions for that resource to be de-restricted. The profile can be sent to, and utilized by, an agent application executing on the user device. The agent application can determine that a user is requesting de-restriction of a resource and determine whether all applicable conditions are met. If the conditions are met, the agent application can de-restrict the resource. After the resource is used, the agent application can report details of the use to an administrator or management server.
1. A method for providing on-demand access to restricted resources of a user device, comprising:
generating a profile at a management server, the profile specifying:
a restricted resource of the user device;
a condition for the restricted resource to be de-restricted;
a usage limitation including at least one of a time limit on de-restricted use and a limit on permitted implementations of the restricted resource; and
a communication preference to notify a respective user of the user device with specified usage information associated with at least one of a de-restriction request and a restricted resource usage; and
causing the profile to be transmitted to the user device, the user device executing an agent application on the user device that:
determines that a user of the user device is requesting a de-restriction of the restricted resource;
causes the user device to display, on a graphical user interface (GUI), an informational page relating to the requested de-restriction, wherein the informational page includes:
an indication of whether any manual actions are required to be performed by the user in order to de-restrict the resource, and if so, a description of the required manual actions;
an indication of at least one action to be performed automatically by the agent application in order to de-restrict the resource;
an indication of the usage limitation regarding the restricted resource; and
a selection element that, when selected by the user, enables the agent application to perform the at least one automatic action to de-restrict the restricted resource;
confirms that the condition is satisfied;
de-restricts the restricted resource on the user device and imposes the usage limitation;
transmits a first notification to the management server regarding the de-restriction, the first notification including information regarding an actual usage of the restricted resource during a period of the de-restriction; and
causes, based on the communication preference, a second notification to include the specified usage information and be transmitted to the respective user.
2. The method of claim 1 , further comprising:
tracking, with at least one of the agent application and the management server, de-restriction requests by the user; and
generating, by one of the agent application and the management server, the second notification to include a number of the de-restriction requests for a predetermined period of time.
3. The method of claim 1 , wherein the agent application causes the second notification to be sent to the administrator, and wherein the specified information describes the actual usage of the restricted resource for the de-restriction.
4. The method of claim 1 , wherein the condition for the restricted resource to be de-restricted is displayed on the user device by the agent application.
5. The method of claim 4 , wherein the agent application displays a visual indication of whether the condition is currently met.
6. The method of claim 1 , wherein the agent application presents an agreement to which the user must agree before the agent application de-restricts the restricted resource.
7. A non-transitory, computer-readable medium comprising instructions that, when executed by a processor of a computing device, cause the computing device to perform stages for providing on-demand access to restricted resources of a user device, the stages comprising:
generating a profile at a management server, the profile specifying:
a restricted resource of the user device;
a condition for the restricted resource to be de-restricted;
a usage limitation including at least one of a time limit on de-restricted use and a limit on permitted implementations of the restricted resource; and
a communication preference to notify a respective user of the user device with specified usage information associated with at least one of a de-restriction request and a restricted resource usage; and
causing the profile to be transmitted to the user device, the user device executing an agent application on the user device that:
determines that a user of the user device is requesting de-restriction of the restricted resource;
causes the user device to display, on a graphical user interface (GUI), an informational page relating to the requested de-restriction, wherein the informational page includes:
an indication of whether any manual actions are required to be performed by the user in order to de-restrict the resource, and if so, a description of the required manual actions;
an indication of at least one action to be performed automatically by the agent application in order to de-restrict the resource;
an indication of the usage limitation regarding the restricted resource; and
a selection element that, when selected by the user, enables the agent application to perform the at least one automatic action to de-restrict the restricted resource;
confirms that the condition is satisfied;
de-restricts the restricted resource on the user device and imposes the usage limitation;
transmits a first notification to the management server regarding the de-restriction, the first notification including information regarding an actual usage of the restricted resource during a period of the de-restriction; and
causes, based on the communication preference, a second notification to include the specified usage information and be transmitted to the respective user.
8. The non-transitory, computer-readable medium of claim 7 , wherein the agent application further comprising:
tracking, with at least one of the agent application and the management server, de-restriction requests by the user; and
generating, by one of the agent application and the management server, the second notification to include a number of the de-restriction requests for a predetermined period of time.
9. The non-transitory, computer-readable medium of claim 7 , wherein the agent application causes the second notification to be sent to an administrator, and wherein the specified information describes the actual usage of the restricted resource for the de-restriction.
10. The non-transitory, computer-readable medium of claim 7 , wherein the condition for the restricted resource to be de-restricted is displayed on the user device by the agent application.
11. The non-transitory, computer-readable medium of claim 10 , wherein the agent application displays a visual indication of whether the condition is currently met.
12. The non-transitory, computer-readable medium of claim 7 , wherein the agent application presents an agreement to which the user must agree before the agent application de-restricts the restricted resource.
13. A system for providing on-demand access to restricted resources of a user device, comprising
a computing device comprising a processor;
a memory store comprising a non-transitory, computer-readable medium having instructions that, when executed by the processor, cause the processor to perform stages comprising:
generating a profile at a management server, the profile specifying:
a restricted resource of the user device;
a condition for the restricted resource to be de-restricted;
a usage limitation including at least one of a time limit on de-restricted use and a limit on permitted implementations of the restricted resource; and
a communication preference to notify a respective user of the user device with specified usage information associated with at least one of a de-restriction request and a restricted resource usage; and
causing the profile to be transmitted to the user device, the user device an agent application on the user device that:
determines that a user of the user device is requesting de-restriction of the restricted resource;
causes the user device to display, on a graphical user interface (GUI), an informational page relating to the requested de-restriction, wherein the informational page includes:
an indication of whether any manual actions are required to be performed by the user in order to de-restrict the resource, and if so, a description of the required manual actions;
an indication of at least one action to be performed automatically by the agent application in order to de-restrict the resource;
an indication of the usage limitation regarding the restricted resource; and
a selection element that, when selected by the user, enables the agent application to perform the at least one automatic action to de-restrict the restricted resource;
confirms that the condition is satisfied;
de-restricts the restricted resource on the user device;
transmits a first notification to the management server regarding the de-restriction, the first notification including information regarding an actual usage of the restricted resource during a period of the de-restriction; and
causes, based on the communication preference, a second notification to include the specified usage information and be transmitted to the respective user.
14. The system of claim 13 , wherein the agent application further comprising:
tracking, with at least one of the agent application and the management server, de-restriction requests by the user; and
generating, by one of the agent application and the management server, the second notification to include a number of the de-restriction requests for a predetermined period of time.
15. The system of claim 13 , wherein the agent application causes the second notification to be sent to an administrator, and wherein the specified information describes the actual usage of the restricted resource for the de-restriction.
16. The system of claim 13 , wherein the condition for the restricted resource to be de-restricted is displayed on the user device by the agent application.
17. The system of claim 16 , wherein the agent application displays a visual indication of whether the condition is currently met.