Policies are executed by the administrative account that Casper is using to manage the Mac. Effectively, any commands are run with elevated privileges. No need to use "sudo".

Hi

Polices are run as root. The two instances when we use the management user are Casper Remote and Self Serivce. Casper Remote uses that account to SSH into the computer. Self Service also uses that account to escalate the current user to an admin user in order to install software.

Hope this helps!

Not even is there no need to use sudo, you should not do so in your scripts, for security reasons.

Thanks Fink! That's exactly what I was wondering and it answered it perfectly.

Not even is there no need to use sudo, you should not do so in your scripts, for security reasons

Mate, Many thanks for that 1 line of info....

Saved me a pile of isuues... Removing Sudo from my scripts sorted a multitude of self service issues....

CHEERS!

Now, If only I wasn't receiving so much Spam emails after my Jamf nation account was hacked... I'd be over the moon :-0