Do commands run as root or as the management user?

[boberito]

I'm wondering if I need to run commands that need full root access, do I need to do it with sudo or if they actually run as root when ran with a policy? Probably an easy question.

[talkingmoose]

Policies are executed by the administrative account that Casper is using to manage the Mac. Effectively, any commands are run with elevated privileges. No need to use "sudo".

[Fink · Accepted solution]

Hi

Polices are run as root. The two instances when we use the management user are Casper Remote and Self Serivce. Casper Remote uses that account to SSH into the computer. Self Service also uses that account to escalate the current user to an admin user in order to install software.

Hope this helps!

[alexjdale]

Not even is there no need to use sudo, you should not do so in your scripts, for security reasons.

[boberito]

Thanks Fink! That's exactly what I was wondering and it answered it perfectly.

[kerouak]

Not even is there no need to use sudo, you should not do so in your scripts, for security reasons

---

Mate, Many thanks for that 1 line of info....

Saved me a pile of isuues... Removing Sudo from my scripts sorted a multitude of self service issues....

CHEERS!

[kerouak]

Now, If only I wasn't receiving so much Spam emails after my Jamf nation account was hacked... I'd be over the moon :-0