Hello! I’m managing a fleet of macOS devices via Hexnode UEM. I need to temporarily grant admin rights to standard user accounts on these devices for a brief period to perform tasks that require admin access. Is there a way to achieve this through a script or configuration profile? Any assistance would be greatly appreciated.
53 Views
Replies (1)
Marked SolutionPending Review
Hexnode Expert
2 weeks ago
Marked SolutionPending Review
Hi! You can easily grant temporary admin rights to the standard user accounts on your Macs using a custom script. Below is a script that will elevate the user to admin for the specified duration, then automatically revert them back to standard account after the set time. A restart isn’t required for the changes to be effective on the device.
Note: replace user_name with the actual username of the standard user and specify_the_time_in_minutes with the desired duration for which the user should have admin rights in minutes.
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 |
# Input: Specify the name of the standard user who is to be elevated Username="user_name" # Input: Specify how long (in minutes) the user will be an admin (3 minutes) DurationInMins=specify_the_time_in_minutes # Check if the user is already an admin isAdmin=$(dscl . -read /Groups/admin GroupMembership | grep -w "$Username") if [ "$isAdmin" ]; then echo "User is already part of the Admin group." else echo "Adding user to Admin group..." sudo dscl . -append /Groups/admin GroupMembership "$Username" # Notify the user that admin privileges have been granted echo "User '$Username' has been granted admin privileges for $DurationInMins minute(s)." # Convert duration to seconds DurationInSecs=$((DurationInMins * 60)) echo "Waiting for $DurationInSecs seconds..." sleep $DurationInSecs echo "Removing user from Admin group..." sudo dscl . -delete /Groups/admin GroupMembership "$Username" echo "User '$Username' has been reverted to standard user." fi |
You can deploy this script to your Macs using Hexnode’s Execute Custom Script remote action. The output of the script will show the status of the changes as given in the image.
Reach out to us if you encounter any errors.
Cheers,
Ben Clarke
Hexnode UEM
Save
