Entra and Azure access, closer to your work.
Just-in-time access. A little less clicking around.
Your roles, accounts and tenants, right where you work.
macOS 26+ · Windows 11 · CLI for Linux, macOS & Windows
Less friction. Better habits.
When activation feels like a chore, extra access can feel convenient. Elevate makes just-in-time easier to practise, with the roles you need a click away.
Made for the way you work
From your first activation to your everyday routine. All in one familiar place.
Entra roles, Azure roles and PIM for Groups across your accounts and tenants. Find what you need from your menu bar, system tray or terminal.
See active roles and pending approvals together. Search by role, tenant or account.
Find your way around
Select the roles you need across tenants and submit them together. Set durations, add a reason, and get back to the task at hand.
Each role keeps its own policy requirements, including MFA and approval.
Explore role activation
Save a role selection and reuse it. Elevate remembers reasons and durations, so your everyday setup is ready when you are.
Already active roles are skipped. Pin your favourites or run a profile with a global shortcut.
Meet profiles and shortcuts
Find available packages, submit a request and follow its status from Elevate. Your self-service access stays close to the rest of your work.
Packages with extra questions open in My Access so you can complete the request there.
Explore access packages
On your terms. On your time.
Live countdowns and expiry reminders help you keep track of active roles. Done early? Deactivate. Extend when the work actually needs it.
Stay on top of active accessActive now · You’re in control
Convenience, with policy still in place
Elevate works with your eligible access and your tenant’s activation requirements. Required approvals and MFA still apply.
Acts with your access. No app-only permissions or client secret.
Read the source. Understand the app. Make it better.
No analytics, crash reporting or usage tracking.
For the whole team
Less setup for people.
Consistent configuration for IT.
Intune, Jamf, Group Policy and managed CLI configuration. One standard app per platform, without a company-specific build.
Push the client ID, sign-in options and tenant settings. Lock managed settings and control update checks.
Publish ready-to-run role profiles through policy or HTTPS. Existing eligibility and PIM requirements still apply.
Settings, Diagnostics and the CLI show applied configuration and warnings. Validate templates before rollout.
A native app for your desktop. A CLI for your terminal.
Free
and open source.
At home in your menu bar.
macOS 26 or laterInstall for macOS Download a DMGOne click from your system tray.
Windows 11 · .NET 10 runtimeInstall for Windows Download an MSICode-signed installer. See the install guide for the publisher name to expect and checksum verification.
Your workflow. Your terminal.
Linux, macOS & WindowsInstall the CLI Explore CLI commands
elevate activate "Global Reader" --duration 2h --reason "Support ticket 4211"
Quickest: the shared Elevate app, an optional multi-tenant registration the project provides so you can try Elevate without creating one. It has no SLA and may change or be withdrawn, and an administrator grants consent once per tenant.
For control over scopes, redirect URIs and lifetime, use your own or your company’s app registration. Azure CLI or Azure PowerShell sign-in needs neither, but supports Azure resource roles only.
About the shared Elevate app Set up your own app registration