Elevate24

Enter your Elevate24 license key. Mandatory key for Premium customers only.

Enter your Elevate24 license api key. Mandatory key for Premium customers only.

Change Elevate24 to show to the new UI. Not required for Elevate24 2.3+ as this is now default.

Default: false

Change the standard application message in the application.

Default: "Use of admin accounts is recorded for security compliance. Select why you require admin privileges and select how long for."

Prodvide the file path to a JPEG or PNG to use as the icon in the Elevate24 application.

Default: "Main Jigsaw24 Logo"

Change the standard header from Elevate24 in the application. Always displays in bold.

Default: "Elevate24"

Change the standard text "Privilege Access Management" under the Elevate24 header. New UI V2.2.0+ Only.

Default: "Privilege Access Management"

Change the standard button text from Elevate in the application.

Default: "Elevate24"

Hide the “Powered by Jigsaw24” logo in the application.

Default: false

Elevate24 2.5+ Only. When enabled, the Elevate24 menubar UI is hidden and cannot be launched manually from /Applications. End users will have no visible way to request elevation, view their session status, or interact with Elevate24 directly. The underlying agent continues to run in the background, enforcing session policies and authorisation rules as normal.

Default: false

Elevate24 2.5+ Only. When enabled, allows user to elevate from the command-line.

Default: false

Enables the option for the application to display a choice of times. To be used in conjuction with Session Times list.

Default: false

Will replace reasons drop down list with a free text entry box.

Default: false

Will disable the ability to extend the time of an active Elevate24 session.

Default: false

Change the length of time (in seconds) the user will be elevated for. Do not use this key if you want to present a list of times to choose from.

Default: "3600"

List of available times to chose from in the Application. Enter time below in seconds.

Default: ["1800","3600","7200"]

The reasons to choose for needing elevated rights in dropbox within the application.

Set the number of minutes before the application notifies the user that the session is expiring

Default: 0

Elevate24 2.4+ Only. When enabled, allows users to specify their own elevation and demotion script paths in addition to any admin-defined scripts. If scripts are configured at both the admin and user level, all scripts will execute. When disabled, only admin-defined scripts (ElevateScriptPath and DemoteScriptPath) will be used.

Default: false

Elevate24 2.4+ Only. Specify the full file path to a script that will be executed automatically when a user's session is elevated to admin. This can be used to perform actions such as logging, launching tools, or configuring the environment at the point of elevation.

Elevate24 2.4+ Only. Optionally provide the SHA256 hash of the elevation script specified in ElevateScriptPath. When configured, Elevate24 will verify the script's integrity before execution and refuse to run it if the hash does not match, protecting against unauthorised modification of the script.

Elevate24 2.4+ Only. Specify the full file path to a script that will be executed automatically when a user's elevated session ends and they are demoted back to a standard user. This can be used to perform clean-up tasks, revoke temporary access, or audit the end of an elevated session.

Elevate24 2.4+ Only. Optionally provide the SHA256 hash of the demotion script specified in DemoteScriptPath. When configured, Elevate24 will verify the script's integrity before execution and refuse to run it if the hash does not match, protecting against unauthorised modification of the script.

To disable sending of premium reporting data to Jigsaw24. If you are a basic customer, no data is sent from the device, it is all stored locally.

Default: false

To enable monitoring of administrator activities whilst in an elevated state.

Default: false

Prompts the user for their local Apple credentials or TouchID (if enabled on device) before allowing elevation.

Default: false

Enables the use of authenticator applications such as Google Auth or Microsoft Auth, prompting for a valid session token before Elevating to admin.

Default: false

Will remove admin rights when the application first launches.

Default: false

Enables all admin users being demoted to standard users when the current elevation period ends. If you have any accounts on the device you'd like to remain admin please configure Demote Exclusions.

Default: false

Will demote all admin accounts from admin when the application quits or the laptop is restarted.

Default: false

Will exclude accounts on device from being demoted.

Will demote the current terminal session from sudo session to standard.

Default: false

Elevate24 v2.3+ Only. To ensure the Application is protected by the on-device system extension, to prevent misuse and tampering.

Default: false

Will create a temporary secondary account instead of Elevating the primary account. A temporary password will also be supplied upon elevation.

Default: false

If User Elevate Admin Key is enabled and this key is also enabled, the temporary account will use the current logged in users username as part of the account naming. For example, Joe.Bloggs-adm

Default: false

If ‘Use Current User As Admin’ is not enabled, this key allows the ability to create a temporary admin account with a standard name. Such as "Temp Admin"

Enables the use of a custom complex password when 'User Elevate Admin' is enabled.

Default: false

Enter the amount of uppercase Letters required for the password.

Enter the amount of lowercase Letters required for the password.

Enter the amount of numbers required for the password.

Enter the amount of symbols required for the password.

Set the number of seconds after elevation or last showing the password that the password will be shown (Max 45 seconds). This only works if 'User Elevate Admin' is enabled.

Default: 0

Range: — – 45