MacOS Privileges

Getting Started


Jamf Connect Privileges is a tool provided by UM IT to allow users to temporarily grant themselves administrative privileges to accomplish various tasks. Jamf Connect Privileges is enabled on a managed UM IT MacOS computer as part of the Assigned Administrative Privileges process. Working as a standard user instead of an administrator adds another layer of security to your Mac and is considered a security best practice.


Jamf Connect Privileges

SAP Privileges

 

Request Assigned Admin Privileges


Information Security Standard Exception Request – Administrative Privileges

 

Jamf Connect Privileges

Jamf Connect Privileges provides a simple solution for elevating standard MacOS users to admin temporarily. Once Jamf Connect Privileges has been enabled on your Mac, you can activate admin privileges from the Jamf Connect icon in your MacOS menu bar across the top of your screen. Select Request Admin Privileges to begin elevating to admin.

 

After you select Request Admin Privileges you will be prompted to enter your Microsoft credentials to confirm the request. These are the same first.last@umt.edu credentials you use when signing into your computer.

 

After confirming your Microsoft Credentials, you will be prompted to select a reason for activating admin privileges. You can select one of the options or select Other to enter a custom reason. Select Continue when you're ready to proceed.

 

After clicking Continue you will be given admin privileges on your Mac for 10 minutes. You will receive a notification that you are now a local administrator. A countdown will appear next to the Jamf Connect menu bar icon. When the countdown reaches zero your admin rights will be removed.

 

After 10 minutes, Jamf Connect will automatically remove your administrator privileges. You can cancel your administrator privileges early by selecting the Jamf Connect menu bar icon and selecting End Admin Privileges.

 

 

 

SAP Privileges

SAP Privileges is an alternative to Jamf Connect Privileges and is only deployed to MacOS computers that are not able to connect to the Internet when you need admin privileges. This usually applies to researchers who need admin going out into the field with their Mac. SAP Privileges works similarly to Jamf Connect Privileges but takes longer to set up on a computer. To enable SAP Privileges on a computer, the UM IT Helpdesk needs to be hands-on with the device to add your user to the correct MacOS groups.

 

Using SAP Privileges


Once SAP Privileges has been installed and enabled on your computer you are ready to elevate to admin privileges.

  1. If the Privileges dock icon is green with a locked white lock, as pictured below, your user account does not currently have administrative privileges. 
  2. To gain administrative privileges, click Privileges in your dock, then click Request privileges in the resulting pop-up. 
  3. Your account now has administrative privileges, and you will receive a notification of the change to confirm this. 

To remove temporary administrative privileges with Privileges

  1. If the Privileges dock icon is yellow with an unlocked black lock, as pictured below, your user account currently has administrative privileges. 
  2. To remove administrative privileges, click Privileges in your dock, then click Remove privileges in the resulting pop-up. 
  3. Your account now no longer has administrative privileges

Important Note:
Privileges and associated Assigned Administrative Privileges may be revoked due to inappropriate use.

 

Was this helpful?
0 reviews
Print Article

Attachments (0)

No attachments found.