Endpoint Privilege Management Cloud 25.3
April 3, 2025
New features
Policy Editor: Compare policy versions
Comparing policy versions is now available on the Policy Editor menu and the Save & Unlock panel. Policy difference feature calculates and illustrates the changes to a policy, including any unsaved changes or changes to a previously saved draft compared to the latest revision or any other policy revision selected.
Enhancements
Analytics: Added filters
Added filters for process events to help explore relationships between process events to make informed decisions on policy. The filters are Windows OS only.
- Parent Process ID: Requires an exact match.
- Parent Process File Name: A text filter that requires that you enter at least 3 characters to match on.
Added to parent process fields in the Events grid to navigate to the process hierarchy tree when we have details for the parent process.
Analytics: Application Group name filter
Enhanced usability, the Application Group Name filter, now only shows options for groups relevant to the selected operating system.
Require Admin role to edit API accounts
The Administrator role and permissions will now be required to edit API accounts. The Edit API Settings permission is removed as part of this change.
This change might impact existing users currently configured with API permissions.
Purge audit logs
Purge activity and JIT access audit logs after configured number of days (default is 90 days). This feature is disabled by default. Request activation for the nightly purge job through BeyondTrust support team.
Analytics: Improved accessibility
To improve accessibility, buttons in the Add to Policy and Save View panels are now always enabled. If you click a button an inline error appears when required fields are blank.
Issues resolved
| Description | Resolution |
|---|---|
| Policy Editor: Copying Application Groups and applications not working correctly in other languages (for example, Chinese). | Copying Applications Groups and applications now supported for other languages. |
| Management API times out when trying to query Computers by Hostname | |
| Unable to log on when PingOne configured. | Can now log on successfully. |
| An exclamation mark (!) displays next to all of the EPM Cloud configuration settings when an Azure AD integration is no longer valid. | An exclamation mark no longer displays. |
| Intermittent issues experienced when downloading data in CSV format from the Events page. | A CSV downloads as expected. |
| Analytics: Inconsistent labelling on the column headers and filter labels. | Updated the labels on the Events page. Column headers and filter labels all now use initial caps. |
| Analytics: Persistent filters not always displaying on the Users page when loading a saved view. | All persistent filter values display as expected. |
| Delays loading Group Details panel. | Improved the load time for Computer Groups details panel. |
| Analytics: Date format on Dashboard tiles not reflecting the date format selected in user preferences. | The date formats presented on the Dashboard tile align with the selected user preferences. |
| Analytics: When Select all is selected on a filter combo box, then Deselect All should display as an option to clear the selected filters. | Deselect All now displays in filter combo boxes to clear selected filters options. |
| Activation fails when MAC address is null or empty string. | Enhanced the Package Manager to prevent activation failures when the MAC address is a null or an empty string. |
EPM Components
- PM Cloud: 25.3.671
- Policy Editor: 25.3.348
- PM Reporting Database: 23.9.13
- PMR UI: 25.3.52
- Event Collector: 25.3.11
Requirements
Microsoft .NET Framework 4.6.2 (required to use PM Cloud Windows Adapter)
Compatibility
Supported Versions
PM Windows adapter
Recommended: 25.3.671
Supported: 25.2.485 | 24.8.446 | 24.7.831 | 24.6.697 | 24.5.1037 | 24.4.361 | 24.3.766 | 24.2.499 | 24.1.581 | 23.9.578 | 23.8.515 | 23.7.356 | 23.6.562 | 23.5.516| 23.4.424 | 23.3.256
PM for Windows
Recommended: 25.2.1.0
Supported: 24.8.98.0 | 24.7.425.0 | 24.5.361.0 | 24.5.351 | 24.3.294.0 | 24.1.108.0 | 23.9.225.0 | 23.7.150.0 | 23.6.76.0 | 23.5.212 | 23.3.130.0
PM Response Generator for Windows
Recommended: 25.2.1.0
Supported: 24.8.98.0 | 24.7.425.0 | 24.5.361.0 | 24.5.351.0 | 24.3.294.0 | 24.1.108.0 | 23.9.225.0 | 23.7.150.0 | 23.5.212 | 23.3.130.0
PM for macOS
Recommended: 25.2.0.1
Supported: 24.8.0.1 | 24.7.0.1 | 24.5.2.3 | 24.5.1.1 | 24.5.0.1 | 24.3.0.1 | 24.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3 | 23.3.1.1 | 23.3.0.1
PM macOS adapter
Recommended: 25.2.0.1
Supported: 24.8.0.1 | 24.7.0.1 | 24.5.2.3 | 24.5.1.1 | 24.5.0.1 | 24.3.0.1 | 24.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3 | 22.5.1.1 | 23.3.0.1
PM Rapid Deployment Tool for Mac OS
Recommended: 25.2.0.1
Supported: 24.8.0.1 | 24.7.0.2 | 24.5.0.1 | 24.3.0.1 | 24.1.0.1 | 23.1.0.1 | 23.9.0.1 | 23.7.0.1 | 23.5.0.1 | 23.3.0.1
PM Response Generator for MacOS
Recommended: 25.2.0.1
Supported: 24.8.0.1 | 24.7.0.1 | 24.5.2.3 | 24.5.1.1 | 24.5.0.1 | 24.3.0.1 | 24.1.0.1 | 23.9.0.1 | 23.7.0.3 | 23.5.0.3 | 23.3.1.1 | 23.3.0.1