CyberArk EPM Implementation and Integration

Python, Linux, Network Administration · 1. Executive Summary This project aims to replace the current BeyondTrust PrivilegeManagementPolicyEditor elevation solution and GPO-based administrator controls with CyberArk Endpoint Privilege Manager (EPM). CyberArk EPM will help remove permanent local administrator rights and provide secure, controlled administrative access only when required through Just-in-Time (JIT) access. The solution will enforce Least Privilege and Zero Trust security principles, control application elevation, manage local administrator passwords (LAPS), and centrally govern privileged access across Windows, macOS, and Linux endpoints. The implementation will improve endpoint security, reduce the risk of credential theft and ransomware attacks, strengthen compliance, and provide better visibility and auditing of privileged activities. 2. Project Objectives Primary Objectives • Eliminate permanent local administrator rights. • Replace BeyondTrust elevation policies with CyberArk EPM. • Implement Just-in-Time (JIT) privilege elevation. • Deploy endpoint privilege management across Windows, macOS, and Linux devices. • Integrate CyberArk EPM with Active Directory (Privilege Guard OUs) and Microsoft Entra ID.