SnapElevate PIM
Business
Free · Designed for iPad. Not verified for macOS.
Azure AD Privileged Identity Management — in your pocket.
SnapElevate puts Microsoft Entra ID (Azure AD) Privileged Identity Management right on your iPhone. Activate and deactivate your eligible admin roles in seconds — no laptop, no web portal, no friction. Built for IT administrators, security engineers, DevOps teams, and managed service providers who practice just-in-time privilege elevation.
BUILT FOR SPEED
• One-tap role activation with justification, duration, and optional ticket number
• Deactivate individual roles early, or hit "Deactivate All" to drop every elevated role at once
• Live countdown showing remaining active time
• Pull-to-refresh role list with optimistic UI updates
• Polished Microsoft-styled interface with haptic feedback
ENTERPRISE-GRADE SECURITY
• Microsoft Entra ID sign-in via MSAL (OAuth 2.0)
• Face ID / Touch ID app lock with configurable inactivity timeout
• Step-up biometric authentication required before every role activation and deactivation
• All credentials stored in iOS Keychain with hardware-backed encryption
• Background privacy screen hides data from task switcher
• Screen recording and screenshot detection
• Jailbreak and debugger detection with user warnings
• Third-party keyboards blocked to prevent keylogging
• Certificate-validated networking pinned to Microsoft domains
• Tamper-evident SHA-256 audit log, exportable for SIEM integration
DEPLOY YOUR WAY
Bring Your Own Azure App Registration — SnapElevate never touches your tenant without your explicit configuration. Enter your Client ID and Tenant ID once and you're done.
MDM-READY FOR IT TEAMS
Deploy through Microsoft Intune, Jamf, Workspace ONE, MobileIron, or Kandji with full Managed App Configuration support:
• Pre-provision Client ID and Tenant ID so users never touch settings
• Enforce mandatory app lock
• Cap inactivity timeout
• Lock login behavior
• Custom branding per tenant (app title, tagline, brand color)
• Data classification banners (CUI / SECRET / TOP SECRET / TS-SCI)
• NIST 800-53 control coverage for federal deployments
WHAT YOU NEED
• Microsoft Entra ID tenant with PIM licensing (Entra ID P2 or Microsoft Entra ID Governance)
• Eligible PIM role assignments
• Azure App Registration with RoleManagement.ReadWrite.Directory delegated permission and admin consent
• An iOS device with Face ID or Touch ID recommended
TRY IT WITHOUT A TENANT
Want to see SnapElevate before you commit? A full demo mode with sample Azure AD roles is built in — no credentials required.
PRIVACY-FIRST
SnapElevate talks directly to Microsoft Graph from your device. We don't run a backend. We don't collect telemetry. We don't see your tokens, your roles, or your activity. Your data stays between your phone and Microsoft.
Part of the SnapApps family alongside SnapTune.
Ratings & Reviews
The developer, Luke Sharkey, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- Luke Sharkey
- Size
- 9.4 MB
- Category
- Business
- Compatibility
Requires iOS 16.0 or later.
- iPhone
Requires iOS 16.0 or later. - iPad
Requires iPadOS 16.0 or later. - Mac
Requires macOS 13.0 or later and a Mac with Apple M1 chip or later. - Apple Vision
Requires visionOS 1.0 or later.
- iPhone
- Languages
- English
- Age Rating
13+
- 13+
- Copyright
- © 2026 SnapApps LLC (Luke Sharkey)