Yeah, I'm not 100% sure. I'm not sure what the threat model for Uninstall Protection is. The official description page isn't completely clear. >Uninstall prote

Yeah, I'm not 100% sure. I'm not sure what the threat model for Uninstall Protection is. The official description page isn't completely clear. >Uninstall protection prevents unauthorized users from uninstalling the Falcon Agent >The “Maintenance Manager” role is available which grants permission to access the maintenance tokens. This role must be enabled against the Falcon user’s account in order to obtain maintenance tokens or manage policy related to Uninstall Protection. Putting those 2 sentences together seems to lead to the conclusion that if someone doesn't have the "Maintenance Manager" role, that person will be prevented from uninstalling the Falcon Agent. It's unclear to me if all admin users are considered to have the Maintenance Manager role. https://www.crowdstrike.com/blog/tech-center/uninstall-protection-for-the-falcon-agent/ https://www.crowdstrike.com/blog/tech-center/uninstall-prote...