Skip to main content
Solved

SAP Privileges App in Self Service

  • April 3, 2019
  • 2 replies
  • 30 views

Forum|alt.badge.img+2

Does anyone use the Privileges app provided by SAP in Self Service? If so, is it possible to grant admin credentials via a policy for a specific time to update just apps that are already installed on the machine? Basically we don't want users to install foreign apps without admin credentials, but we would like to grant them admin credentials to update their current ones.

https://github.com/SAP/macOS-enterprise-privileges/releases

Thank you.

Best answer by rich.trouton

For the specific identified use case (Privileges enabling only the update of apps), no.

Privileges does the following:

  • Allows the logged-in user to get admin rights if they don't have them.
  • Takes away admin rights from the logged-in user

What the user does with the admin rights while they have them is not something Privileges is set up to manage.

2 replies

Forum|alt.badge.img+33
  • Hall of Fame
  • Answer
  • April 3, 2019

For the specific identified use case (Privileges enabling only the update of apps), no.

Privileges does the following:

  • Allows the logged-in user to get admin rights if they don't have them.
  • Takes away admin rights from the logged-in user

What the user does with the admin rights while they have them is not something Privileges is set up to manage.


Forum|alt.badge.img+2
  • Author
  • New Contributor
  • April 4, 2019

Understood. Is it possible to narrow it via JAMF though?