I have just gone through the options available for Control to setup "Consent Required" as set in ConnectWise Control. The problem with this is that it still allows the administrator to override the consent restrictions. We would prefer that the enpoint user have the deciding factor for this feature as set on the agent service. Once the service is installed on the endpoint, the user should have the ability to right mouse click on the service icon and select some options such as "Consent Required" and also "Enable Consent after X minutes delay". This would give the endpoint user full control over security and access to their machine. I might suggest editing these features should be disabled while a connection is established preventing the support agent from modifying them will connected.
Customer support service by UserEcho