Monday
Hello,
I'm testing the Temp user promotion setting:
I have set a com.jamf.connect config profile with the below plist
It's showing correctly on the jamf connect menu bar but when I click and select the reason nothing happens and the timer doesn't show in the bar nor the user gets elevated.
Hope anyone encoutered the same issue
Thanks
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>TemporaryUserPermissions</key>
<dict>
<key>TemporaryUserPromotion</key>
<true/>
<key>URLCommandLineElevation</key>
<false/>
<key>UserPromotionDuration</key>
<integer>60</integer>
<key>UserPromotionReason</key>
<false/>
<key>UserPromotionTimer</key>
<true/>
<key>VerifyUserPromotion</key>
<false/>
</dict>
</dict>
</plist>
7 hours ago - last edited 7 hours ago
How are you creating and deploying the configuration?
We deploy this as a part of our larger menu bar configuration profile for devices we want with this option which is not very many. Giving the user the ability to give themselves admin access is baiscally no different than just giving them admin access so be careful with this.
<key>TemporaryUserPermissions</key>
<dict>
<key>TemporaryUserPromotion</key>
<true/>
<key>UserPromotionBiometrics</key>
<false/>
<key>UserPromotionChoices</key>
<array>
<string>OS Action Execute Package</string>
<string>OS Action Install Software</string>
<string>OS Action Uninstall Software</string>
<string>OS Action System Settings Change</string>
</array>
<key>UserPromotionDuration</key>
<integer>5</integer>
<key>UserPromotionReason</key>
<true/>
<key>UserPromotionTimer</key>
<true/>
<key>VerifyUserPromotion</key>
<false/>
</dict>