SnapElevate PIM

Azure AD Privileged Identity Management — in your pocket.

SnapElevate puts Microsoft Entra ID (Azure AD) Privileged Identity Management right on your iPhone. Activate and deactivate your eligible admin roles in seconds — no laptop, no web portal, no friction. Built for IT administrators, security engineers, DevOps teams, and managed service providers who practice just-in-time privilege elevation.

BUILT FOR SPEED

• One-tap role activation with justification, duration, and optional ticket number • Deactivate individual roles early, or hit "Deactivate All" to drop every elevated role at once • Live countdown showing remaining active time • Pull-to-refresh role list with optimistic UI updates • Polished Microsoft-styled interface with haptic feedback

ENTERPRISE-GRADE SECURITY

• Microsoft Entra ID sign-in via MSAL (OAuth 2.0) • Face ID / Touch ID app lock with configurable inactivity timeout • Step-up biometric authentication required before every role activation and deactivation • All credentials stored in iOS Keychain with hardware-backed encryption • Background privacy screen hides data from task switcher • Screen recording and screenshot detection • Jailbreak and debugger detection with user warnings • Third-party keyboards blocked to prevent keylogging • Certificate-validated networking pinned to Microsoft domains • Tamper-evident SHA-256 audit log, exportable for SIEM integration

DEPLOY YOUR WAY

Bring Your Own Azure App Registration — SnapElevate never touches your tenant without your explicit configuration. Enter your Client ID and Tenant ID once and you're done.

MDM-READY FOR IT TEAMS

Deploy through Microsoft Intune, Jamf, Workspace ONE, MobileIron, or Kandji with full Managed App Configuration support:

• Pre-provision Client ID and Tenant ID so users never touch settings • Enforce mandatory app lock • Cap inactivity timeout • Lock login behavior • Custom branding per tenant (app title, tagline, brand color) • Data classification banners (CUI / SECRET / TOP SECRET / TS-SCI) • NIST 800-53 control coverage for federal deployments

WHAT YOU NEED

• Microsoft Entra ID tenant with PIM licensing (Entra ID P2 or Microsoft Entra ID Governance) • Eligible PIM role assignments • Azure App Registration with RoleManagement.ReadWrite.Directory delegated permission and admin consent • An iOS device with Face ID or Touch ID recommended

TRY IT WITHOUT A TENANT

Want to see SnapElevate before you commit? A full demo mode with sample Azure AD roles is built in — no credentials required.

PRIVACY-FIRST

SnapElevate talks directly to Microsoft Graph from your device. We don't run a backend. We don't collect telemetry. We don't see your tokens, your roles, or your activity. Your data stays between your phone and Microsoft.

Part of the SnapApps family alongside SnapTune.