Elevate24

Appearance

Release notes ​

Elevate24 2.5.1 - 22nd June 2026 ​

New Features ​

CLI Elevation ​

Elevate24 is now available via command-line, this feature allows users to request privilege elevation directly from the terminal. This is most useful for SSH sessions, automation, and scripted workflows where the GUI isn't practical. This is only available for primary account elevation and is not support on secondary account elevation.

Blocked Event Notifications ​

Introducing real-time notifications when a security policy blocks an action (process execution, file operations, process signals).

Disable User Elevation Mode ​

New DisableUserElevation key prevents users from self-elevating while keeping the app and session monitoring active. Useful for monitoring-only deployments, or for toggling elevation on/off via MDM Self Service without uninstalling.

Improvements ​

  • Microsoft Sentinel: Timestamps now use ISO 8601 UTC with en_US_POSIX locale, matching Sentinel's expected format. New SentinelLogToFile key writes payloads to /tmp/Elevate24/SentinelUploads/ for debugging and a fix has been added where a crash may happen certain Sentinel configurations when an admin account not managed by Elevate24 is demoted.
  • Event Processing: Username filtering now supported on process execution rules.
  • UI: Improved window height handling when toggling settings.
  • Full Disk Access: Backend fixes to resolve the full disk access alert appearing on first boot when it shouldn't.

IMPORTANT

⚠️ Certificate Update: This installer is signed with an updated certificate: Jigsaw Systems Ltd (563MYW3H73).

Elevate24 Application v2.4.0 ​

New Features ​

  • Elevation and Demotion scripts — Elevate24 now supports running custom scripts on elevation and demotion events. his can be used to perform actions such as automated actions, launching tools, or configuring the environment at the point of elevation or demotion. More information can be found Here

NOTE

This feature requires the system extension to be enabled (UseSystemExtension set to true).

Improvements ​

  • Wildcard support in process authorisation rules — Matching arguments on execute process rules now supports wildcard (*) patterns. Arguments are also no longer case-sensitive. Additionally, resolved an issue where spaces in comma-separated values (e.g. "value1, value2") were not being trimmed correctly.

  • Secondary account validation — Improved checks for valid user account state when using the temporary secondary account. If an invalid account state is detected, Elevate24 will automatically remove and re-create the user account.

  • Demotion safety check — Before demoting accounts found in the admin group, Elevate24 now verifies that the user account actually exists on the device.

  • Password policy compliance for secondary accounts — Added additional steps during password creation for the secondary admin account to verify the generated password meets any password policy deployed to the device via MDM. This is handled automatically and requires no additional configuration.

  • System extension installation reliability — Improved the extension installation process to resolve a rare issue where the extension could become stuck during an update.

  • Security monitoring log formatting — Fixed an issue with the formatting of security logs when used with the siemUploadURL preference key.

  • Event log upload reliability — Fixed an issue where some event logs were not uploaded correctly.

NOTE

If you are using the siemUploadURL key on com.jigsaw24.Elevate24SecurityExtension, please verify that logs are uploading to your SIEM correctly before deploying this update across your estate.

Elevate24 Application v2.3.2 ​

System extension ​

  • The introduction of a macOS system extension for Elevate24 marks a significant step forward in delivering secure, reliable, and native privileged access management for Mac environments. By leveraging Apple’s system extension framework, Elevate24 aligns with Apple’s security and privacy architecture, ensuring compatibility with the latest versions of macOS and helping to future-proof deployments. Crucially, running as a system extension also protects the Elevate24 agent from tampering by isolating it from user space and enforcing stricter controls on how it can be accessed or modified. This hardened approach significantly reduces the risk of malicious interference or circumvention.

IMPORTANT

Review Requirements page before upgrading to 2.3.0+

  • The default UI is now the new modern design. The newUI key no longer needs to be set and is removed.

Elevate24 Application v2.2.8 ​

  • This fix addresses a UI bug that occurs during the EULA acceptance screen for new basic customer installations.

Elevate24 Application v2.2.7 ​

  • The new UI now respects the mainbutton key.

  • The Elevate24 window may occasionally appear incorrectly. This has been resolved to ensure it always has the same size.

  • Microsoft Sentinel error logging has been improved for the Elevate24 Application.

  • The icon has been updated to comply with macOS 26 guidelines.

  • A fix has been implemented to ensure custom complex passwords are set correctly when a key’s value is 0.

Elevate24 Application v2.2.6 ​

  • To create a more space-friendly and focussed look, we’re introducing our brand new UI Design. This is an optional feature at the moment, but will be mandatory in a later release. To switch to the new UI set the newUI key to true.

  • Clicking the Elevate24 Application now opens the menu bar app, which allows you to add it to the dock and interact with it to open the application.

  • User settings have been added to allow users to turn off the countdown clock and reduce the size of the space Elevate24 takes up in the menu bar.

  • You can now configure session expiry notifications. This allows Elevate24 to notify you before your session expires. This is a user setting, but you can also force it by configuring sessionExpiryReminder.

  • Introducing the extend button. This allows you to extend the session by the original time selected. This feature helps prevent interruptions to workflows or ongoing tasks beyond the original duration. To block this feature, configure blockExtend.

Elevate24 Application v2.1.3 ​

  • Apple Authentication for multi-factor authentication when requesting elevated rights is now possible on a basic configuration and no longer limited to premium customers.

Elevate24 Application v2.1.2 ​

  • Elevate24’s Basic EULA URL now redirects to the Jigsaw24 Website’s hosted copy.

  • Fixed a rare issue that occasionally caused the temporary account to not set the randomly generated password correctly.

  • Debug logging improvements have been made.

Elevate24 Application v2.1.1 ​

  • Fixes a bug that caused the EULA to appear on Premium customer devices

Elevate24 Application v2.1.0 ​

  • Now includes a free basic mode, no longer requiring a license.
  • Now includes a countdown timer clock for more visibility and awareness of how long is left of the session.
  • Added protection for existing accounts.
  • A license error now shows a re-launch button for faster troubleshooting. This allows end users to quit and re-open the app more easily.
  • You can now CMD + Click the version number on Elevate24 Application to output the logs to the /tmp folder for support.
  • Basic mode now has a custom logo.
  • Temporary secondary account username field can now be copied the same as the password field.
  • Temporary secondary account mode now supports showAdminPasswordGrace. Configuring this key allows premium customers using temporary account mode to show the password for up to 40 seconds after authentication before prompting for authentication again.
  • Temporary secondary account mode now supports complex password configurations. To be used for organisations with strict password policies.
  • Various bug fixes and improvements

macOS Privileged Access Management solution