Challenge / Response Designated User Option

Challenge / Response provides an additional level of control for access to applications and privileges.

An extra aspect of this feature is Designated User authorization. When this option is enabled, a designated user such as a system administrator can authorize the elevation in place of (or in addition to) a Challenge Response code.

Input Outcome
Valid Challenge / Response code only is provided Application runs as logged on user
Valid Challenge / Response code is provided and valid (but not required) credentials are provided Application runs as logged on user
Invalid Challenge / Response code is provided but valid credentials are provided Application runs as authorizing user
No Challenge / Response code is provided but valid credentials are provided Application runs as authorizing user

For more information on Designated User settings, please see the Authorization Settings section of Challenge / Response Authorization.