Catalina Self Service Install Not Requiring Admin Credentials

[GabeShack]

Hey all,
I'm trying to confirm the behavior I'm seeing.
Right now I have the 10.15.7 Catalina installer scoped Via the app store to self service. I've helped a few staff members click on the install button for this for self service and then it downloads the installer to their computer. Then once it completes, it shows the open button in self service. Once this is clicked, it used to ask for an admin users name and password to start the install process, but now it seems to let the user run though the upgrade with out prompting for this. Is this how it works now? Is this a new feature? If so then great and I can just scope the Catalina update to 10.15 through self service and not have to worry about it. I just know when I've scoped the Mac OS Installers previously through the app store, it still required an admin to run it.

Gabe Shackney
Princeton Public Schools

[Cayde-6]

Anything processed through Self Service is executed as root.

[GabeShack · Accepted solution]

I moved to using the update/erase script from https://github.com/kc9wwh/macOSUpgrade 

I added a bit of logic to the policy to download a package of the upgrade for any systems before Catalina when some of the command line download commands didn't exist.