> ## Documentation Index
> Fetch the complete documentation index at: https://university.triggr-app.com/llms.txt
> Use this file to discover all available pages before exploring further.

# AutoElevate

> Connect CyberFOX AutoElevate to Triggr with a Partner API token, then map your clients to AutoElevate companies.

Triggr works with AutoElevate companies, locations, computers, elevation requests, events, sessions and rules, usage, audit logs and webhooks.

## Set up AutoElevate

<Steps>
  <Step title="Create a service user">
    In the Web Admin Portal at `msp.autoelevate.com`, go to Users, click Add User, choose Service and name it `Triggr`. Its role must cover every permission you grant the key.
  </Step>

  <Step title="Add an API key">
    Select the user, open API Keys and click Add API Key. Set Type to AE-BEARER (not HMAC), grant the [permissions](#permissions) below and choose an Expiration.
  </Step>

  <Step title="Copy the token">
    Click Generate and copy the token, which starts with `aeb_`. AutoElevate shows it only once.
  </Step>
</Steps>

See CyberFOX's [AutoElevate Partner API (Beta)](https://support.cyberfox.com/en_US/autoelevate-partner-api-beta) article.

### Permissions

`companyView` is required for client mapping, List Companies and Get Company. Add the others your workflows need.

| Permission | Triggr actions |
| - | - |
| `locationView` | List Locations, Get Location |
| `computerView` | List Computers, Get Computer, Get Usage |
| `requestView` | List Elevation Requests, Get Elevation Request |
| `requestEdit` | Approve Elevation Request, Deny Elevation Request |
| `eventView` | List Elevation Events |
| `elevatedSessionView` | List Elevated Sessions, Get Elevated Session |
| `ruleView` | List Elevation Rules |
| `auditLogView` | List Audit Logs |
| `webhookView` | List Webhooks, Get Webhook, List Webhook Delivery Logs |
| `webhookAdd` | Create Webhook |
| `webhookEdit` | Update Webhook, Send Test Webhook |
| `webhookDelete` | Delete Webhook |

## Connect it in Triggr

<Steps>
  <Step title="Open the integration">
    Go to **Integrations > AutoElevate** and click **Configure** on the Base Configuration card.

    <Frame>
      <img src="https://mintcdn.com/triggr/nyuVXZ1rouDTTEvu/images/integrations-common/base-configuration.png?fit=max&auto=format&n=nyuVXZ1rouDTTEvu&q=85&s=bb81acb082055015f91beda7b4876f35" alt="The Base Configuration card with Status Not Configured, Admin Consent Not Required and a Configure button." width="2272" height="330" data-path="images/integrations-common/base-configuration.png" />
    </Frame>
  </Step>

  <Step title="Paste the token">
    Paste it into API Token and click **Save Configuration**.

    <Frame>
      <img src="https://mintcdn.com/triggr/MwzXHG3UWzFixdSz/images/autoelevate/configure.png?fit=max&auto=format&n=MwzXHG3UWzFixdSz&q=85&s=476214acea7d6f7d5fdc43dd14274c0f" alt="The AutoElevate configuration window with an API Token field and setup hint, an Allow insecure TLS switch under Advanced, and a Save Configuration button." width="1344" height="1090" data-path="images/autoelevate/configure.png" />
    </Frame>
  </Step>

  <Step title="Rotate the key before it expires">
    Add a new key with the same permissions, click **Edit** on the Base Configuration card and paste its token in, then revoke the old key.

    <Frame>
      <img src="https://mintcdn.com/triggr/nyuVXZ1rouDTTEvu/images/integrations-common/base-configuration-configured.png?fit=max&auto=format&n=nyuVXZ1rouDTTEvu&q=85&s=73e58be09bb3c5d679bee1f070f1e123" alt="The Base Configuration card with Status Configured, Admin Consent Not Required, and Unlink and Edit buttons." width="2272" height="338" data-path="images/integrations-common/base-configuration-configured.png" />
    </Frame>
  </Step>
</Steps>

For an endpoint without a built-in action, use a Generic Integration Action step and start the path at the version, such as `/v1/computers`.

## Map your clients

On the Client Mapping card, click **Apply 100% Matches**, then choose the AutoElevate company in Mapped to for anyone left. Triggr saves each match as the client's `autoElevateCompanyId` variable, which you can pass as `companyId` on list actions.

<Frame caption="The Client Mapping card, shown here for ConnectWise Manage as an example.">
  <img src="https://mintcdn.com/triggr/nyuVXZ1rouDTTEvu/images/integrations-common/client-mapping.png?fit=max&auto=format&n=nyuVXZ1rouDTTEvu&q=85&s=da797e78dc917005df8e55c6b6cb166b" alt="The Client Mapping card with All, Mapped and Unmapped filters, Acme Corp mapped to Acme Corp with a 75% suggested mapping, and Globex unmapped with a Select ConnectWise Manage clients dropdown." width="2272" height="702" data-path="images/integrations-common/client-mapping.png" />
</Frame>

## Troubleshooting

<AccordionGroup>
  <Accordion title="Every action fails with 401">
    Check the token was pasted in full, hasn't expired or been revoked, and is an AE-BEARER key. If not, create a new key and paste its token into API Token.
  </Accordion>

  <Accordion title="An action fails with 403">
    The key lacks the action's [permission](#permissions), is restricted to some companies, or calls an endpoint, such as audit logs, that needs CyberFOX's Early Access programme.
  </Accordion>

  <Accordion title="Companies are missing from Client Mapping">
    The key needs `companyView` and access to every company. Then click Refresh on Client Mapping.
  </Accordion>

  <Accordion title="A computer is missing from List Computers">
    AutoElevate only returns computers whose agent has checked in within the last 30 days.
  </Accordion>

  <Accordion title="Requests fail with 429">
    AutoElevate allows 20 requests per minute per endpoint across your account. Call a list action once without a company filter, with `take` set to `200`, and group the results by `companyId`.
  </Accordion>
</AccordionGroup>


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.