Unprivileged
In shortThe agent runs as the signed-in user, never asks for admin rights and never runs what it finds.
Where it sits in EndLayer · step 1 of 7, deploy
What it means
Running without admin rights limits what the device agent could ever do, which is part of why it is safe to install everywhere.
Why it matters
Security teams can approve an agent that cannot take over the machine.