Hi all,

I work at an organization with just under 10,000 employees. Users have always had admin rights, and we're long past due to rectify that. I have noticed that some tools out there to manage elevated rights like BeyondTrust, Thycotic, CyberArk have audit-only modes so you can see when your users are actually using administrative rights. I was wondering if anyone has ever used a tool like this that didn't require an official POC with a vendor, seeing as I'm not sure I will even get budget to actually do anything. My current project/task is to determine LOE to get this work done, but without some ability to actually see when/why people are using admin rights, it's going to be difficult to determine.

​

Thanks all in advance

Joey