Glossary

TermDefinition
Administrative PrivilegesElevated rights on an endpoint that allow system level changes, such as installing software or modifying protected settings. EPM-WM is designed to remove unnecessary administrative privileges while enabling controlled elevation.
Allow as Password Safe UserAn application rule option that runs an application using a Password Safe managed account instead of the logged-in user.
AnalyticsReporting and visualization capabilities that provide insight into application usage, policy enforcement, privilege elevation, and user activity.
Application ControlA capability of Endpoint Privilege Management that allows organizations to define which applications are permitted to run with elevated privileges and under what conditions.
Application DefinitionThe identifying attributes used by EPM-WM to recognize and control an application
Application GroupA collection of applications treated as a single unit by application rules
Application RuleA rule that controls how an application is handled (allow, block, audit, or elevate).
Appliance AdministrationAdministrative controls used to manage appliance-level settings, maintenance tasks, and operational status.
Application Programming Interface (API)An API is programming interface provided for automation tools and external applications.
BeyondTrust Cloud Region AvailabilityA listing of the geographic cloud regions where BeyondTrust cloud services can be deployed to meet data residency, compliance, and latency requirements.
Challenge/Response AuthorizationA credential-based prompt requiring a response code before a privileged action proceeds.
ComputerA Windows or macOS endpoint with the EPM-WM agent installed that receives policies and reports events.
Computer GroupA logical grouping of computers used to assign policies and control how EPM-WM settings are applied.
Content GroupA defined set of files or directories controlled independently of applications.
Custom TokenA reusable variable used in rules or groups to apply consistent, custom behavior.

©2003-2026 BeyondTrust Corporation. All Rights Reserved. Other trademarks identified on this page are owned by their respective owners. BeyondTrust is not a chartered bank or trust company, or depository institution. It is not authorized to accept deposits or trust accounts and is not licensed or regulated by any state or federal banking authority.