Script to tell who has Admin rights to their computer

There is a Extension Attribute I got from JAMFNATION that was posted by someone else. I feel horrible that I didn't document who posted it. Here it is:

#!/bin/bash

# Script to detect if a computer has a local admin account on it with an UID of above 500

# Initialize array

list=()


# generate user list of users with UID greater than 500

for username in $(dscl . list /Users UniqueID | awk '$2 > 500 { print $1 }'); do

# Checks to see which usernames are reported as being admins. The
# check is running dsmemberutil's check membership and listing the
# accounts that are being reported as admin users. Actual check is
# for accounts that are NOT not an admin (i.e. not standard users.)

    if [[ $(dsmemberutil checkmembership -U "${username}" -G admin) != *not* ]]; then
    # Any reported accounts are added to the array list
        list+=("${username}")
    fi
done

# Prints the array's list contents

echo "<result>${list[@]}</result>"

Here is an example of the results for a system with three admins. Notice they displayed on one line:

User - local admin accounts: jason m0000421 mactech

Credit for that script goes to Ryan Manly. I copied it to my GitHub repo when he posted it to the Casper email list:

https://github.com/rtrouton/rtrouton_scripts/tree/master/rtrouton_scripts/Casper_Extension_Attributes/check_for_admin_accounts

I also wrote a post about it at the time:

http://derflounder.wordpress.com/2011/12/22/checking-which-accounts-on-a-mac-have-administrator-rights/

ignore; old broken version previously posted

rtrouton,

So I added the Extension Attributes how do I run a report??

Thanks!