> ## Documentation Index
> Fetch the complete documentation index at: https://kb.mspprocess.com/llms.txt
> Use this file to discover all available pages before exploring further.

# AutoElevate

> Connect CyberFOX AutoElevate to Triggr with a Partner API token, then map your clients to AutoElevate companies.

Triggr works with AutoElevate companies, locations, computers, elevation requests, events, sessions and rules, usage, audit logs and webhooks.

## Set up AutoElevate

**1. Create a service user**

In the Web Admin Portal at `msp.autoelevate.com`, go to Users, click Add User, choose Service and name it `Triggr`. Its role must cover every permission you grant the key.

**2. Add an API key**

Select the user, open API Keys and click Add API Key. Set Type to AE-BEARER (not HMAC), grant the [permissions](#permissions) below and choose an Expiration.

**3. Copy the token**

Click Generate and copy the token, which starts with `aeb_`. AutoElevate shows it only once.

See CyberFOX's [AutoElevate Partner API (Beta)](https://support.cyberfox.com/en_US/autoelevate-partner-api-beta) article.

### Permissions

`companyView` is required for client mapping, List Companies and Get Company. Add the others your workflows need.

| Permission | Triggr actions |
| - | - |
| `locationView` | List Locations, Get Location |
| `computerView` | List Computers, Get Computer, Get Usage |
| `requestView` | List Elevation Requests, Get Elevation Request |
| `requestEdit` | Approve Elevation Request, Deny Elevation Request |
| `eventView` | List Elevation Events |
| `elevatedSessionView` | List Elevated Sessions, Get Elevated Session |
| `ruleView` | List Elevation Rules |
| `auditLogView` | List Audit Logs |
| `webhookView` | List Webhooks, Get Webhook, List Webhook Delivery Logs |
| `webhookAdd` | Create Webhook |
| `webhookEdit` | Update Webhook, Send Test Webhook |
| `webhookDelete` | Delete Webhook |

## Connect it in Triggr

**1. Open the integration**

Go to **Integrations > AutoElevate** and click **Configure** on the Base Configuration card.

![The Base Configuration card with Status Not Configured, Admin Consent Not Required and a Configure button.](https://mintcdn.com/triggr/nyuVXZ1rouDTTEvu/images/integrations-common/base-configuration.png?fit=max\&auto=format\&n=nyuVXZ1rouDTTEvu\&q=85\&s=bb81acb082055015f91beda7b4876f35)

**2. Paste the token**

Paste it into API Token and click **Save Configuration**.

![The AutoElevate configuration window with an API Token field and setup hint, an Allow insecure TLS switch under Advanced, and a Save Configuration button.](https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/autoelevate/configure.png?fit=max\&auto=format\&n=MwzXHG3UWzFixdSz\&q=85\&s=476214acea7d6f7d5fdc43dd14274c0f)

**3. Rotate the key before it expires**

Add a new key with the same permissions, click **Edit** on the Base Configuration card and paste its token in, then revoke the old key.

![The Base Configuration card with Status Configured, Admin Consent Not Required, and Unlink and Edit buttons.](https://mintcdn.com/triggr/nyuVXZ1rouDTTEvu/images/integrations-common/base-configuration-configured.png?fit=max\&auto=format\&n=nyuVXZ1rouDTTEvu\&q=85\&s=73e58be09bb3c5d679bee1f070f1e123)

For an endpoint without a built-in action, use a Generic Integration Action step and start the path at the version, such as `/v1/computers`.

## Map your clients

On the Client Mapping card, click **Apply 100% Matches**, then choose the AutoElevate company in Mapped to for anyone left. Triggr saves each match as the client's `autoElevateCompanyId` variable, which you can pass as `companyId` on list actions.

![The Client Mapping card with All, Mapped and Unmapped filters, Acme Corp mapped to Acme Corp with a 75% suggested mapping, and Globex unmapped with a Select ConnectWise Manage clients dropdown.](https://mintcdn.com/triggr/nyuVXZ1rouDTTEvu/images/integrations-common/client-mapping.png?fit=max\&auto=format\&n=nyuVXZ1rouDTTEvu\&q=85\&s=da797e78dc917005df8e55c6b6cb166b)

The Client Mapping card, shown here for ConnectWise Manage as an example.

## Troubleshooting

> [accordion] Every action fails with 401
>
> Check the token was pasted in full, hasn't expired or been revoked, and is an AE-BEARER key. If not, create a new key and paste its token into API Token.

> [accordion] An action fails with 403
>
> The key lacks the action's [permission](#permissions), is restricted to some companies, or calls an endpoint, such as audit logs, that needs CyberFOX's Early Access programme.

> [accordion] Companies are missing from Client Mapping
>
> The key needs `companyView` and access to every company. Then click Refresh on Client Mapping.

> [accordion] A computer is missing from List Computers
>
> AutoElevate only returns computers whose agent has checked in within the last 30 days.

> [accordion] Requests fail with 429
>
> AutoElevate allows 20 requests per minute per endpoint across your account. Call a list action once without a company filter, with `take` set to `200`, and group the results by `companyId`.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.