Your comments

As far as I know the only way to do that is to reset all open sessions. 

Exactly. The part where the user disconnects the supporter with elevated permission is what we currently use as reasoning why the user can't close the session on their own...

Maybe it helps others here. We have for now declared it as a security feature, since it prevents users from kicking out a technician while the technician has for example an admin-prompt open over remote.

If the user were to kick them out in that time, they could do whatever they want and get access to sensitive information or systems. Without that option its in the responsibility of the technician.

Nevertheless it would be great to have the option to enable it upon request.

For us it is a requirement as well, also based on german labor and dataprotection laws.Please add the functionality for the end-user to disconnect a technician from his or her computer.