Admin gating is a control model in which an administrator must approve a feature, permission, or service before individual users can enable it. In other words, user choice is limited until central policy allows access. This is common in managed business environments, where security teams want consistent settings across devices and accounts.
In cyber security, admin gating matters because it reduces the chance that risky features are turned on without review. It can prevent data-sharing tools, browser extensions, or local storage features from being enabled on sensitive endpoints. Defenders use it to enforce policy, scope exposure, and apply compliance rules. Attackers, by contrast, often benefit when users can self-enable powerful capabilities; admin gating adds friction by requiring a trusted decision point before a feature can create new data or permissions. It does not make a system safe by itself, but it helps ensure that security-sensitive options are evaluated before they become part of the attack surface.


