Privilege Management Audit & Reports
Track elevation events, audit justifications, and detect potential privilege misuse across managed endpoints. Two reports show elevation activity relevant to compliance and security monitoring.
These reports describe elevation activity; they are not a full export of the applications configured in the Privileged Application List. Inspect the configured selection in Privilege Management. If you need an export with specific fields, describe the requirement to support and, where available, review Query Reports. Available data and supported query options must be checked for your environment.
Applications Elevated with Reason
This report records every application elevated by a user, along with the justification provided at the time of elevation. Use this report to verify that elevations have legitimate reasons and maintain an audit record for compliance.
Applications Running with Administrator Privileges
This report lists all applications currently running with administrative rights across managed endpoints. Use it to detect potential privilege misuse — any application running with admin privileges that isn't expected to be elevated warrants investigation.
