Security settings

These keys are to configure the security settings of Elevate24 and how the Application behaves when certain occurrences happen.

System extension

• Availability: Basic & Premium
• Version: 2.3.0+
• Type: Boolean
• Default: false
• Team Identifier 563MYW3H73

To ensure the Application is protected by the on-device system extension, to prevent misuse and tampering.

<key>UseSystemExtension</key>
<true/>

IMPORTANT

To enable system extension on devices, a separate configuration must be deployed to approve the Jigsaw24 Identifier. Otherwise, Elevate24 will not work correctly and the user will be prompted to manually enable this setting, which requires administrator permissions. System Extension Approval

Enable monitoring

• Availability: Premium
• Type: Boolean
• Default: false

This will enable session monitoring within Elevate24, capturing logs of privileged access activities for security analysis and compliance.

   <key>EnableSessionMonitoring</key>
   <true/>

Standard at load

• Availability: Basic & Premium
• Type: Boolean
• Default: false

Will remove admin rights when the application first launches.

<key>standardatLoad</key>
<true/>

Demote all admin

• Availability: Basic & Premium
• Type: Boolean
• Default: false

Enables all admin users being demoted to standard users when the current elevation period ends.

WARNING

This will demote all administrator accounts on your device. Please use demoteExclusions to set exclusions for any orgnisational administrator accounts you may have.

<key>demoteAllAdmin</key>
<true/>

Demote exclusions

• Availability: Basic & Premium
• Type: String

Will exclude accounts from being demoted when the application quits or ends the elevated session. This is strongly recommended if the business uses a standard administrator account across all devices.

<key>demoteExclusions</key>
<array>
<string>CorpAdmin</string>
<string>ACMEAdmin</string>
</array>

Demote account on quit / logout

• Availability: Basic & Premium
• Type: Boolean
• Default: false

Will demote all admin accounts from admin when the application quits or the laptop is restarted.

<key>demoteAllAdminQuit</key>
<true/>

End terminal sessions

• Availability: Basic & Premium
• Type: Boolean
• Default: false

NOTE

Automatically terminates elevated shell sessions when the admin session ends. This prevents privilege escalation through persistent terminal windows running sudo commands in shells like zsh, bash, or other shell types.

<key>killterminalsessions</key>
<true/>

Enable Apple authentication

• Availability: Premium
• Type: Boolean
• Default: false

Prompts the user for their local Apple credentials or TouchID (if enabled on device) before allowing elevation.

<key>enableAppleAuth</key>
<true/>

Enable OTP

• Availability: Premium
• Type: Boolean
• Default: false

Enables the use of authenticator applications such as Google Auth or Microsoft Auth, prompting for a valid session code.

<key>GoogleAuth</key>
<true/>