I'm somewhat new to Zenworks so this might be a simple question.

I have a help desk situation where I need to allow help desk technicians
the ability to remote control workstations but the local user should
always be prompted for verification.

However, I need my regular IT staff to have unrestricted access to remote
tools without prompting the local user.

I see that I can restrict access at the user or workstation level (remote
controlled object) but not by the user who is initiating the remote
request. Is this correct?

My Zenworks agent on the workstations is still 6.5 and I'm using the Zen 7
snapins for ConsoleOne 1.3.6e.