Posted on 11-13-2023 11:50 AM
Hello we are currently testing a privilage management software and we have demoded some of our admins to standard users, we noticed that standard users can not start a time machine back up, we did a bit of search and located a few scripts with the following lines but they dont seem to change anything
security authorizationdb write system.preferences.timemachine allow
/usr/bin/security authorizationdb write system.preferences.timemachine allow
we have used similar code for print and wifi settings and they do seem to allow users to print and connect to wifi but enabling time machine still gives the MacOS pop up asking for credentials on ventura and sonoma.
"system preferences is tyring to modify your systems settings" - "enter your password to allow this"
we tried adding the
/usr/bin/security authorizationdb write system.preferences.timemachine authenticate-session-owner-or-admin
to allow all users but still no luck.
Posted on 11-15-2023 05:50 AM
I have 2 lines not one.
security authorizationdb write system.preferences allow
security authorizationdb write system.preferences.timemachine allow
It is run as a script from Jamf, so it will be run as root and not the user. It is kind of dumb, you are allowing all users not just one to complete the timeMachine stuff.