To understand more about how to use Bomgar and what it does, please refer to the following internal document: Veiledning til Bomgar.
Bomgar, as used by the University of Oslo, is a cloud instance of the Bomgar product licensed by BeyondTrust. Therefore, it is installed on a server in Germany. Authentication is provided by Azure AD via SAML. To learn more about how the authentication is set up, please refer to this document: Oppsetting av SAML autentisering for Bomgar.
Giving a user access to Bomgar
Send a request to bomgar-admin@usit.uio.no. GM3 will then add the user on Azure AD on the group "Bomgar temporary".
New users get the default access role for the group "Lokal IT". Just add the user on another group if there is need for other roles.
Administration rights to the Bomgar instance
The users on the group "macOS Taskforce" have administrative rights to the Bomgar instance. The local user "admin" also have rights to administer the instance.
Other Bomgar configuration
For the moment, our MDM system (Workspace ONE) has configured a privacy profile for macOS clients that allows the Bomgar client to execute on a client machine without the user having to explicitly add it to its list of granted access on the "Privacy" section of the security preferences. This doesn't mean that the Bomgar Client can be arbitrary executed, as the user needs to actively input a session key given by the support team so that a session can be installed, Clients are deleted after use.
It is planned to distribute the Bomgar client to macOS clients so that the users don't have to download it each time.