Enable Internet Sharing for standard users without admin rights

Hello everyone,

We have a strict requirement to allow standard (non-admin) macOS users to enable Internet Sharing, even if this is an Apple platform limitation. Granting local admin rights is not an option.

Environment:

• macOS (Ventura / Sonoma)

• Jamf Pro

• Standard user accounts only

What we’ve reviewed so far:

• Jamf policies and scripts

• Self Service workflows

• Configuration profiles / PPPC

• Authorization Database changes

At this point, Internet Sharing appears to require system-level privileges, but the business requirement still stands and we need to explore any supported or semi-supported approach that can meet this need without making users admins.

Questions:

1. Has anyone achieved this using Jamf or macOS controls?

2. Are there any workarounds (MDM-driven, scripted, or AuthorizationDB-based) that allow standard users to enable Internet Sharing?

3. Can Jamf or Apple officially confirm whether this is completely blocked?

Any guidance, confirmation, or alternative approaches would be appreciated.

Thanks!