Granular administrator approval of user commands and actions in remote access sessions
In one embodiment, a method for granular administrator approval of user commands and actions in remote access sessions includes providing, by a device, a remote access session to a remote device for both a user device and an overseeing device. The overseeing device may display user device actions on the remote access session. In addition, such methods can further include determining, by the device, a set of permitted actions and a set of restricted actions that the user device is allowed to perform on the remote device in the remote access session, allowing, by the device, user device actions when permitted, and requesting by the device, real-time permission from the overseeing device when user device action is restricted.
1 . A method, comprising:
providing, by a device, a remote access session to a remote device for both a user device and an overseeing device to manage the remote device, the providing including:
causing display of, via the user device, a view of an interface associated with the remote device; and
causing display of, via the overseeing device, the view of the interface associated with the remote device;
determining, by the device, a first action that the user device is allowed to perform on the remote device in the remote access session and a second action to perform on the remote device in the remote access session that requires approval from the overseeing device;
allowing, by the device, the first action to be performed by the user device when requested; and
performing an approval process, by the device, to facilitate real-time permission from the overseeing device when the second action is requested, the approval process including causing display of, via the overseeing device, enhanced contextual information overlaid on the view of the interface, the enhanced contextual information including an indicator related to the second action and an indicator to approve or deny the second action.
2 . The method of claim 1 , further comprising:
enabling the second action to be performed in response to receiving a communication regarding approval from the overseeing device; and
blocking the second action in response to receiving a communication regarding denial from.
3 . The method of claim 1 , wherein the enhanced contextual information includes a banner that provides information regarding movements performed by the user device or actions performed by the user device, or both.
4 . The method of claim 1 , wherein the enhanced contextual information includes visual indicators or textual indications, or both, of actions performed by the user device.
5 . The method of claim 1 , wherein the enhanced contextual information includes a historical account of past actions performed by the user device.
6 . The method of claim 1 , wherein the enhanced contextual information is selected from a group consisting of: colored dots for clicks, keyboard commands, keyboard shortcuts, mouse drags, mouse actions, and information on actions inputted to the user device.
7 . The method of claim 1 , wherein the first action includes keyboard actions performed by the user device, mouse drags performed by the user device, or both.
8 . The method of claim 1 , wherein the second action is selected from a group consisting of: a type of mouse click input, an instruction to submit a command, an instruction to execute a command, an instruction to start a program, an instruction to stop a program, an instruction to edit a file, and an instruction to submit a form.
9 . The method of claim 1 , wherein the real-time permission from the overseeing device is selected from a group consisting of: a user of the overseeing device performing a mouse click operation, a user of the overseeing device performing a key stroke operation, a user of the overseeing device selecting an approve action, and a user of the overseeing device selecting a deny action.
10 . The method of claim 1 , wherein the first action and the second action are based in part on administrator-defined rules.
11 . The method of claim 1 , wherein the first action and the second action are based in part on a machine learning model that is trained on approvals and denials of requested permissions over time.
12 . An apparatus, comprising:
one or more network interfaces to communicate with a network;
a processor coupled to the one or more network interfaces; and
a memory configured to store instructions that, when executed by the processor, configure the processor to:
cause display of, via a user device, a view of an interface associated with a remote access session to manage a remote device;
cause display of, via an overseeing device, the view of the interface;
determine a first action that the user device is allowed to perform on the remote device in the remote access session and a second action to perform on the remote device in the remote access session that requires approval from the overseeing device;
allow the first action to be performed by the user device when requested; and
perform an approval process to facilitate real-time permission from the overseeing device when the second action is requested, the approval process including causing display of, via the overseeing device, enhanced contextual information overlaid on the view of the interface, the enhanced contextual information including an indicator related to the second action and an indicator to approve or deny the second action.
13 . The apparatus of claim 12 , wherein the enhanced contextual information includes a banner that provides information regarding movements performed by the user device or actions performed by the user device, or both.
14 . The apparatus of claim 12 , wherein the enhanced contextual information includes visual indicators or textual indications, or both, of actions performed by the user device.
15 . The apparatus of claim 12 , wherein the enhanced contextual information includes a historical account of past actions performed by the user device.
16 . The apparatus of claim 12 , wherein the enhanced contextual information is selected from a group consisting of: colored dots for clicks, keyboard commands, keyboard shortcuts, mouse drags, mouse actions, and information on actions inputted to the user device.
17 . The apparatus of claim 12 , wherein the second action is selected from a group consisting of: a type of mouse click input, an instruction to submit a command, an instruction to execute a command, an instruction to start a program, an instruction to stop a program, an instruction to edit a file, and an instruction to submit a form.
18 . A tangible, non-transitory, computer-readable medium storing program instructions that cause a device to execute a process comprising:
providing, via a user device, a view of an interface associated with a remote access session to manage a remote device;
providing, via an overseeing device, the view of the interface;
determining a first action that the user device is allowed to perform on the remote device in the remote access session and a second action to perform on the remote device in the remote access session that requires approval from the overseeing device;
allowing the first action to be performed by the user device when requested; and
performing an approval process to facilitate real-time permission from the overseeing device when the second action is requested, the approval process including providing, via the overseeing device, enhanced contextual information overlaid on the view of the interface, the enhanced contextual information including an indicator related to the second action and an indicator to approve or deny the second action.
19 . The tangible, non-transitory, computer-readable medium of claim 18 , wherein the enhanced contextual information includes indicates movements of a pointer of the user device.
20 . The tangible, non-transitory, computer-readable medium of claim 18 , wherein the enhanced contextual information indicates past actions performed by the user device.