Elevate Audit

Reothor·Reothor.Elevate.Audit

Finds standing privileged access in a Microsoft Entra tenant that belongs in PIM

A read-only companion to Elevate for administrators. Sign in with Microsoft's Graph PowerShell and Azure CLI public clients (no app registration), and get a list of permanent privileged Entra role assignments held by users and groups (nested groups resolved), permanent members of PIM-managed groups, and permanent Azure Owner and Contributor assignments, with remedies, as terminal output, JSON or a self-contained HTML report.

winget install --id Reothor.Elevate.Audit --exact --source winget

Latest 1.1.0·September 19, 2026

Release Notes

Installer type: zip

x64—A7D2D03681D2D95492DED2EFB9AC62558FE0E7DDEB6E5C391F24768909194E20
arm64—BA3CEF7DB7752130B058E5C3647D1638B0E386466A7CE90F5AB4AD2D653750EA

Details

Homepage
https://github.com/FrodeHus/elevate
License
MIT
Publisher
Reothor
Support
https://github.com/FrodeHus/elevate/issues
Copyright
Copyright (c) Frode Hus
Moniker
elevate-audit

Tags

azureclientrapimprivileged-identity-managementrbacsecurity

Older versions (3)

1.1.0
x64—A7D2D03681D2D95492DED2EFB9AC62558FE0E7DDEB6E5C391F24768909194E20
arm64—BA3CEF7DB7752130B058E5C3647D1638B0E386466A7CE90F5AB4AD2D653750EA
1.0.1
x64—1F4AD16EACDE0F19857B53687CB02248090E18503E30BAA464862BA582059FF8
arm64—9BB1302E621EEB51E7E680CC20590D16FB8413C6594BC13DCB20A0A2B5BB4BD9
1.0.1
x64—1F4AD16EACDE0F19857B53687CB02248090E18503E30BAA464862BA582059FF8
arm64—9BB1302E621EEB51E7E680CC20590D16FB8413C6594BC13DCB20A0A2B5BB4BD9