About privilege elevation

Privilege elevation provides a way for users to log in as themselves with limited privilege and then request to elevate their access in order to perform privileged operations. Users can then provide additional MFA credentials to continue and run the privileged commands or applications.

By using privilege elevation, you grant access based on Zero Trust principles and then grant privileged access only when needed for a specific operation.

You can grant privileged access to specific commands or all commands. For more information, see Working with privilege elevation and Specifying privilege elevation commands and applications.