Managing privilege delegation on a server device

A method, comprising:

• intercepting, via an agent plug-in installed on an RM server, a request originating from a first user account of a logged-in user on a client device to execute a command by the RM server and as a second user account on the RM server, wherein the first user account is assigned first privileges, the second user account is assigned second privileges, the request is transmitted over a network from the client device to the RM server, and the request is intercepted by the agent plug-in prior to receipt by an intended recipient on the RM server;
• obtaining, via the RM server, information related to the request to execute the command;
• determining, via the RM server, whether to execute the command on the RM server by applying a policy to the information related to the request;
• and
• in response to determining to execute the command, causing, via the RM server, the command to be executed according to the second privileges in the second user account.

A non-transitory computer-readable medium embodying a program that, when executed by a processing circuit of a remote management (RM) server, causes the processing circuit to:

• intercept a request, via an agent plug-in installed on the RM server, originating from a first user account of a logged-in user on a client device to execute a command by the RM server and as a second user account on the RM server, wherein the first user account is assigned first privileges, the second user account is assigned second privileges, the request is transmitted over a network from the client device to the RM server, and the request is intercepted by the agent plug-in prior to receipt by an intended recipient on the RM server;
• obtain information related to the request to execute the command;
• determine whether to execute the command on the RM server by applying a policy to the information related to the request;
• and
• in response to determining to execute the command, cause the command to be executed according to the second privileges in the second user account.