I am running CSA on a number of workstations in live mode but I wanted to give certain users (techs) privileged access so i created a user state group with those users and when those users log into a machine with csa they are able to see the UI and disable/enable csa to install applications. For other users the UI rule is not enabled so not its viewable on their desktop. It seems to be working however the UI frequently disappears if I make a rule change or create a new rule. Is this a good way or am I hacking it in a way it shouldn't be used. Right now the techs have to reboot the machine and relog into their accounts to see the CSA client icon. Seems to me there should be a better way.
Sounds like a good way. Be sure there are no other Agent UI Control rules that might be stepping on the one you created.
Also, the Agent UI will disappear if there are no Agent UI Control rules applied to the host.