Configuring client interface access

Classify your user group and determine the required access level for them.

The Client Interface Mode policy provides:

Full access — Allows the managed system user to view or change all feature settings using the local system password credentials. You can provide Full access to users for whom you don't want to restrict any action.
Standard access — Allows the managed Mac users to run software updates and to run scheduled scans. To view or change the protection preferences, the managed Mac user must provide the password defined by the ePO - On-prem administrator.
Lock client interface — The user is prompted for the ePO - On-prem administrator password to start the client console.

Tip
If the managed system user changes the protection settings locally, the subsequent policy enforcement overrides the changes.