Privilege Management Audit & Reports

Track elevation events, audit justifications, and detect potential privilege misuse across managed endpoints. Two reports surface the elevation activity most relevant to compliance and security monitoring.

Applications Elevated with Reason

This report records every application elevated by a user, along with the justification provided at the time of elevation. Use it to verify that elevations are happening for legitimate reasons and to maintain an auditable record for compliance purposes.

Applications Running with Administrator Privileges

This report lists all applications currently executing with administrative rights across managed endpoints. Use it to detect potential privilege misuse — any application running with admin privileges that isn't expected to be elevated warrants investigation.