If this is a M1 machine, it would be indicate that "softwareupdate -iaR"
or the like was run on it but the user "X"'d out of the password prompt.
We had that happen here (as we rolled out a form of that script above to
everyone - M1 and Intel on all ...
Yes, an API user with the following permissions:Jamf Pro Server Objects:
Computer [Create, Read]Jamf Pro Server Actions: Send Computer Remote
Command to Download and Install macOS Update
One thing to note for folks using "softwareupdate" is that changing the
"delay updates for X days" setting in a profile won't take effect on
endpoints until they are restarted or this is run:launchctl kickstart -k
system/com.apple.softwareupdatedIt's...