Security Settings
These keys are to configure the security settings of Elevate24 and how the Application behaves when certain occurrences happen.
System Extension
- Availability: Basic & Premium
- Version: 2.3.0+
- Type: Boolean
- Default:
false
- Team Identifier 563MYW3H73
To ensure the Application is protected by the on-device system extension, to prevent misuse and tampering.
<key>UseSystemExtension</key>
<true/>
IMPORTANT
To enable system extension on devices, a separate configuration must be deployed to approve the Jigsaw24 Identifier. Otherwise, Elevate24 will not work correctly and the user will be prompted to manually enable this setting, which requires administrator permissions. System Extension Approval
Standard at Load
- Availability: Basic & Premium
- Type: Boolean
- Default:
false
Will remove admin rights when the application first launches.
<key>standardatLoad</key>
<true/>
Demote all admin
- Availability: Basic & Premium
- Type: Boolean
- Default:
false
Enables all admin users being demoted to standard users when the current elevation period ends.
WARNING
This will demote all administrator accounts on your device. Please use demoteExclusions
to set exclusions for any orgnisational administrator accounts you may have.
<key>demoteAllAdmin</key>
<true/>
Demote Exclusions
- Availability: Basic & Premium
- Type: String
Will exclude accounts from being demoted when the application quits or ends the elevated session. This is strongly recommended if the business uses a standard administrator account across all devices.
<key>demoteExclusions</key>
<array>
<string>CorpAdmin</string>
<string>ACMEAdmin</string>
</array>
Demote account on quit / logout
- Availability: Basic & Premium
- Type: Boolean
- Default:
false
Will demote all admin accounts from admin when the application quits or the laptop is restarted.
<key>demoteAllAdminQuit</key>
<true/>
End Terminal Sessions
- Availability: Basic & Premium
- Type: Boolean
- Default:
false
NOTE
Add More Info!
<key>killterminalsessions</key>
<true/>
Enable Apple Authentication
- Availability: Premium
- Type: Boolean
- Default:
false
Prompts the user for their local Apple credentials or TouchID (if enabled on device) before allowing elevation.
<key>enableAppleAuth</key>
<true/>
Enable OTP
- Availability: Premium
- Type: Boolean
- Default:
false
Enables the use of authenticator applications such as Google Auth or Microsoft Auth, prompting for a valid session code.
<key>GoogleAuth</key>
<true/>