Skip to content
SanShivaSHELL ELOS Docs
Browse the documentation

Time-bound privileged elevation

For engineering managers, security and compliance 3 min read

Temporary local-admin rights to install or update a tool, approved like any access and expiring on their own.

Before you begin

  • The Manage people permission to request an elevation.
  • The Approve access permission to decide it.

Some tools need admin rights on an engineer's machine to install or update. ELOS never gives standing admin for this. It raises a temporary local-admin grant that goes through approval and expires on its own.

Request an elevation

  1. Open the engineer's page from Onboarding or Members.
  2. In Developer environment, find the tool that needs admin rights and choose Request elevation.
  3. ELOS routes a time-bound local-admin request for that tool to its approver.

You can also ask Ask ELOS: it drafts the elevation request, and you choose Submit for approval to send it.

Approve and expire

Approvers decide on Access requests, as for any request. See Approve access. When the grant's time is up, it's revoked automatically. The request, the decision and the expiry are all in the audit log.

What's next

  • Access reviews: Certify standing access: start a review over active grants and decide to keep or revoke each one.