Setup Elevated Access
Elevated Access (Overview)
Elevated Access allows privileged actions on domain-joined endpoints without sharing a common admin password. Technicians authenticate with their own Evo credentials and are granted access to designated shared accounts via an Elevation Assignment.
Example scenario
You’re an MSP with a client using an on-prem directory. Historically, technicians log in with a shared domain admin account such as “SuperAdmin.” With Elevated Access, techs no longer need that password. They sign in with their personal Evo credentials and are authorized to act as “SuperAdmin” when needed.
Initial Configuration Needs
Before you can add a new elevated assignment group, the following configuration must be in place.
- Users added or synced from a directory, and have the user type of Admin.
- User(s) must have an Elevated Access License. See: How do I manage my user licenses?
- User Tenant Access have been configured.
- Role-Based permission groups have been created. Including the permission of Elevated Access > Can be an Elevated Admin.
- At least one domain account has been created.
- At least one Domain Admin or Local Admin with a Rotated password.
If you have all that set, we’re ready to create the appropriate elevated assignment groups.
How to add an elevation assignment for select users/groups
- From the dashboard, click Evo Admin > Permissions
- Click Elevated Assignment once in permissions.
- With the Elevated Assignment Management tab selected. Click Create Assignment.
- Give your Group a Name & Description
- Select which Users & or Groups you want attached to this Assignment
- Select which Domain Accounts you want accessible to these Users/Groups
- Click Save
How to edit an elevation assignment
- From the dashboard, click Evo Admin > Permissions
- Click Elevated Assignment once in permissions.
- Locate your group you intend to edit and hit the Pencil icon on far right to edit the group.
- Save your changes
How to delete elevation assignments
- From the dashboard, click Evo Admin > Permissions
- Click Elevated Assignment once in permissions.
- Locate your group you intend to delete and hit the trash can icon on the far right
- Confirm your deletion by hitting Delete on the popup confirmation.
- Click Delete.