Temporary Admin rights using Jamf School

mramola
New Contributor III

I have found some information from a Jamf Pro system on creating a temporary Admin through Self-Service and would like to do the same using Jamf School but can not find any documentation if it is possible and how to get it set up.  Our teachers are standard users but there are times it would be beneficial for them to have admin access.  We are specifically having an issue with standard users not being able to update Chrome.  

3 REPLIES 3

mramola
New Contributor III

Hmmm...this doesn't open to anything and also says Jamf Pro in the link so my guess is this is not what I was looking for.  I'm looking for a temp. solution for Jamf School.

PerryK
New Contributor III

This app should do the trick: https://github.com/SAP/macOS-enterprise-privileges

When configured with managed preferences it can be set to revoke admin rights after a certain time. There is another project around which can also revoke the admin rights without using managed preferences.

For chrome in particular I believe you can set a managed preference for Chrome's auto-update application (keystone) and then if you are installing the enterprise version of Chrome it should automatically keep up to date without requiring admin rights to first enable keystone/helper app for update.

https://support.google.com/chrome/a/answer/7591084?hl=en
https://chromeenterprise.google/intl/en_au/browser/download/#mac-tab

mramola
New Contributor III

This looks promising - thank you.  I will look into both of these options a little more in-depth and test them out in our environment.