SnapElevate PIM

Azure AD Privileged Identity Management — in your pocket. SnapElevate puts Microsoft Entra ID (Azure AD) Privileged Identity Management right on your iPhone. Activate and deactivate your eligible admin roles in seconds — no laptop, no web portal, no friction. Built for IT administrators, security engineers, DevOps teams, and managed service providers who practice just-in-time privilege elevation. BUILT FOR SPEED • One-tap role activation with justification, duration, and optional ticket number • Deactivate individual roles early, or hit "Deactivate All" to drop every elevated role at once • Live countdown showing remaining active time • Pull-to-refresh role list with optimistic UI updates • Polished Microsoft-styled interface with haptic feedback ENTERPRISE-GRADE SECURITY • Microsoft Entra ID sign-in via MSAL (OAuth 2.0) • Face ID / Touch ID app lock with configurable inactivity timeout • Step-up biometric authentication required before every role activation and deactivation • All credentials stored in iOS Keychain with hardware-backed encryption • Background privacy screen hides data from task switcher • Screen recording and screenshot detection • Jailbreak and debugger detection with user warnings • Third-party keyboards blocked to prevent keylogging • Certificate-validated networking pinned to Microsoft domains • Tamper-evident SHA-256 audit log, exportable for SIEM integration DEPLOY YOUR WAY Bring Your Own Azure App Registration — SnapElevate never touches your tenant without your explicit configuration. Enter your Client ID and Tenant ID once and you're done. MDM-READY FOR IT TEAMS Deploy through Microsoft Intune, Jamf, Workspace ONE, MobileIron, or Kandji with full Managed App Configuration support: • Pre-provision Client ID and Tenant ID so users never touch settings • Enforce mandatory app lock • Cap inactivity timeout • Lock login behavior • Custom branding per tenant (app title, tagline, brand color) • Data classification banners (CUI / SECRET / TOP SECRET / TS-SCI) • NIST 800-53 control coverage for federal deployments WHAT YOU NEED • Microsoft Entra ID tenant with PIM licensing (Entra ID P2 or Microsoft Entra ID Governance) • Eligible PIM role assignments • Azure App Registration with RoleManagement.ReadWrite.Directory delegated permission and admin consent • An iOS device with Face ID or Touch ID recommended TRY IT WITHOUT A TENANT Want to see SnapElevate before you commit? A full demo mode with sample Azure AD roles is built in — no credentials required. PRIVACY-FIRST SnapElevate talks directly to Microsoft Graph from your device. We don't run a backend. We don't collect telemetry. We don't see your tokens, your roles, or your activity. Your data stays between your phone and Microsoft. Part of the SnapApps family alongside SnapTune.