Privilege elevation

Grant a time-bounded higher role from Administration without permanently changing the person's standing role.

Privilege elevation is a break-glass control in Administration → Privilege Elevation. It grants a higher role for a defined window (up to 72 hours) without permanently changing the person’s standing role. The elevation is applied as a temporary overlay at authentication time and reverts when the window ends. Granting requires an organization administrator and re-authentication.

When to elevate

Use elevation when someone needs higher privilege for a bounded task — an investigation, a release window, a support escalation — and you want the grant attributable and time-limited rather than a standing role change.

Grant an elevation

Before you start Open Administration → Privilege Elevation. You'll need organization administrator access and be ready to re-authenticate.

  1. Search for the user in the organization directory (candidates show license type alongside identity).
  2. Choose the elevated role and the window (within the 72-hour maximum).
  3. Confirm with re-authentication so the grant is attributable to you.

Result The person can act with the elevated role until the window ends; their standing role is unchanged afterward.

Was this helpful?