Elevated Access is Evo's way of allowing a privileged Administrative user to sign-in as a domain account by using their own personal credentials. Sounds confusing? Please refer to this article on how Elevated Access works - How Does Elevated Access Work?
When creating an elevated group, you’ll have the opportunity to select if the group should be associated to all tenants (customers) or for a select tenants (customers).
Initial Configuration Needs
Before you can add a new elevated assignment group, the following configuration must be in place.
- Users added or synced from a directory, and have the user type of Admin.
- User(s) must have an Elevated Access License. See: How do I manage my user licenses?
- User customer access permissions have been configured.
- Role-Based permission groups have been created. Including the permission of Elevated Access > Can be an Elevated Admin.
- At least one domain account has been created.
If you have all that set, we’re ready to create the appropriate elevated assignment groups.
How to add an elevated group for all customers
Creating a new elevated assignment for All Tenants will apply to all current and future tenants. Recommend only using this if you have a common account across all tenants.
It should be noted, to be able to apply a domain account for all tenants, that account (username or email address) must have the capability to login to all tenants.
- From the dashboard, click Access.
- Click Elevated Access.
- With the Elevated Access Management tab selected. Click Create Assignment.
- Click All Customers.
- Enter a group name. Optionally, enter a description.
- Click Next Step.
- Check the row for each domain account to include in the access group.
- Click Next Step.
- Select any User Groups to assign, and click Next Step.
- Check the row for each user to be associated to the group.
- Click Complete Group Assignment.
How to add an elevated group for select customers
- From the dashboard, click Access.
- Click Elevated Access.
- With the Elevated Access Management tab selected. Click Create Assignment.
- Click Select Customers.
- Check the row for each tenant the group is to be associated.
- Click Next Step.
- Check the row for each user to be associated to the group.
- Click Complete Group Assignment.
How to edit an elevated group
Editing an elevated access group is limited to the type of group that was added.
- All customers: Description, Domain Accounts, and Users.
- Select customers: Description, Tenants, Domain Accounts, and Users.
- From the top navigation, click Professional Services.
- Click Privileged Access Management.
- Click Elevated Access.
- Click Elevated Access Management.
- With the Elevated Access Management tab selected, find the one you want to edit. Click the edit pencil at the end of the row.
- Make the edits you want.
- Click Complete Group Assignment.
NOTE: Elevated Access Also works with Evo Cloud! Take a look here if you are interested in learning more: What is Evo Cloud?