Elevate24

—

Enter your Elevate24 license key. Mandatory key for Premium customers only.

Enter your Elevate24 license api key. Mandatory key for Premium customers only.

Change Elevate24 to show to the new UI. Not required for Elevate24 2.3+ as this is now default.

Change the standard application message in the application.

Prodvide the file path to a JPEG or PNG to use as the icon in the Elevate24 application.

Change the standard header from Elevate24 in the application. Always displays in bold.

Change the standard text "Privilege Access Management" under the Elevate24 header. New UI V2.2.0+ Only.

Change the standard button text from Elevate in the application.

Hide the “Powered by Jigsaw24” logo in the application.

Enables the option for the application to display a choice of times. To be used in conjuction with Session Times list.

Will replace reasons drop down list with a free text entry box.

Will disable the ability to extend the time of an active Elevate24 session.

Change the length of time (in seconds) the user will be elevated for. Do not use this key if you want to present a list of times to choose from.

List of available times to chose from in the Application. Enter time below in seconds.

The reasons to choose for needing elevated rights in dropbox within the application.

Set the number of minutes before the application notifies the user that the session is expiring

Elevate24 2.4+ Only. Specify the full file path to a script that will be executed automatically when a user's session is elevated to admin. This can be used to perform actions such as logging, launching tools, or configuring the environment at the point of elevation.

Elevate24 2.4+ Only. Optionally provide the SHA256 hash of the elevation script specified in ElevateScriptPath. When configured, Elevate24 will verify the script's integrity before execution and refuse to run it if the hash does not match, protecting against unauthorised modification of the script.

Elevate24 2.4+ Only. Specify the full file path to a script that will be executed automatically when a user's elevated session ends and they are demoted back to a standard user. This can be used to perform clean-up tasks, revoke temporary access, or audit the end of an elevated session.

Elevate24 2.4+ Only. Optionally provide the SHA256 hash of the demotion script specified in DemoteScriptPath. When configured, Elevate24 will verify the script's integrity before execution and refuse to run it if the hash does not match, protecting against unauthorised modification of the script.

Elevate24 2.4+ Only. When enabled, allows users to specify their own elevation and demotion script paths in addition to any admin-defined scripts. If scripts are configured at both the admin and user level, all scripts will execute. When disabled, only admin-defined scripts (ElevateScriptPath and DemoteScriptPath) will be used.

To disable sending of premium reporting data to Jigsaw24. If you are a basic customer, no data is sent from the device, it is all stored locally.

—

—

—

—

To enable monitoring of administrator activities whilst in an elevated state.

Prompts the user for their local Apple credentials or TouchID (if enabled on device) before allowing elevation.

Enables the use of authenticator applications such as Google Auth or Microsoft Auth, prompting for a valid session token before Elevating to admin.

Will remove admin rights when the application first launches.

Enables all admin users being demoted to standard users when the current elevation period ends. If you have any accounts on the device you'd like to remain admin please configure Demote Exclusions.

Will demote all admin accounts from admin when the application quits or the laptop is restarted.

Will exclude accounts on device from being demoted.

Will demote the current terminal session from sudo session to standard.

Elevate24 v2.3+ Only. To ensure the Application is protected by the on-device system extension, to prevent misuse and tampering.

Will create a temporary secondary account instead of Elevating the primary account. A temporary password will also be supplied upon elevation.

If User Elevate Admin Key is enabled and this key is also enabled, the temporary account will use the current logged in users username as part of the account naming. For example, Joe.Bloggs-adm

If ‘Use Current User As Admin’ is not enabled, this key allows the ability to create a temporary admin account with a standard name. Such as "Temp Admin"

Enables the use of a custom complex password when 'User Elevate Admin' is enabled.

Enter the amount of uppercase Letters required for the password.

Enter the amount of lowercase Letters required for the password.

Enter the amount of numbers required for the password.

Enter the amount of symbols required for the password.

Set the number of seconds after elevation or last showing the password that the password will be shown (Max 45 seconds). This only works if 'User Elevate Admin' is enabled.

—

—

—

—

—

—

—

—