diff --git a/src/vs/workbench/api/browser/mainThreadTunnelService.ts b/src/vs/workbench/api/browser/mainThreadTunnelService.ts
index 044d5e03e98fbea326aa85d84e6471199d6ddc37..1d198877f0e0166ce8e328878165ceeb0ba104c0 100644
--- a/src/vs/workbench/api/browser/mainThreadTunnelService.ts
+++ b/src/vs/workbench/api/browser/mainThreadTunnelService.ts
@@ -45,7 +45,8 @@ export class MainThreadTunnelService extends Disposable implements MainThreadTun
 				&& (tunnelOptions.localAddressPort !== undefined)
 				&& (tunnel.tunnelLocalPort !== undefined)
 				&& isPortPrivileged(tunnelOptions.localAddressPort)
-				&& (tunnel.tunnelLocalPort !== tunnelOptions.localAddressPort)) {
+				&& (tunnel.tunnelLocalPort !== tunnelOptions.localAddressPort)
+				&& this.tunnelService.canElevate) {
 
 				this.elevationPrompt(tunnelOptions, tunnel, source);
 			}