Full Self Elevation

Note: Requires ThreatLocker Windows Agent Version 10.2 or greater.

Full Self Elevation is a setting type that can be applied to users within your organization that grants admin permissions for the specified time period. Full Self Elevation can be applied to the level of your choice, though Entire Organization is selected by default.

Navigate to Agent Settings.

Select New Setting in the top left corner.

In the Create sidebar, select Full Self Elevation from the Setting Type dropdown.

Once Full Self Elevation is selected, a new switch called 'Allow users to self-elevate' will appear in the 'Parameters' section.

Once switched on, a dropdown menu titled 'Set elevation period' will appear. By default, the elevation period will be set for 1 hour. However, the following options can be selected instead:

15 minutes
30 minutes
45 minutes
1 hour
2 hours
3 hours
6 hours

The 'Set elevation period' dropdown indicates how long elevation will last on the user's machine once Full Self Elevation is utilized.

Once the agent has been updated on the user's machine, the user can view a new button in the ThreatLocker tray. Right-clicking on the ThreatLocker tray icon will display the new button, titled 'Elevation Mode'.

Selecting the 'Elevation Mode' option will open a pop-up window titled 'Elevation Justification'. This is required to enable Elevation Mode on the user's machine. You must fill in a short message describing why Elevation is needed before selecting 'Apply'.

Once 'Apply' has been selected, Elevation Mode will begin on the user's machine for the amount of time that the 'Set elevation period' is set during creation of the Agent Setting.

Once you have filled out your Setting Type and Parameters, navigate to the bottom of the 'Create Settings' side panel. Select the 'Create' button at the bottom of the page to create the setting.

Press the Update Agents button at the top of the page to push this new setting to all applicable agents.

In some cases, you may need to utilize Self-Approve Applications in conjunction with Full Self-elevation to gain the flexibility of installation you might require. But we are not encouraging you to do this.