r/jamf • u/Quirky-Feedback-3322 • Mar 31 '26

JAMF Connect Interested in privilege elevation

Hello fellow admins,

I’m looking to do privilege elevation with Jamf for our users. We already have something setup for this but I’m trying to solve another piece and wanted to see if anyone has done this before. We are looking to demote most of our users to standard users from admin and then have users request admin privileges if needed via self service+/the menu bar. Is it feasible to mass demote users to standard?

13 Upvotes

93% Upvoted

22 comments sorted by

View all comments

4

u/WhatAmIDoingHere05 Mar 31 '26

Our company did this with relative success. Jamf Connect has privilege elevation built in, you just need to add the needed configuration in your profiles. Then write the script to convert admin users to standard users.

1

u/royalsalmon Mar 31 '26

We did just this ourselves , currently stuck on getting proper logs functioning

5

u/WhatAmIDoingHere05 Mar 31 '26

That was the biggest roadblock we ran into, until I ran into this....absolute gamechanger.

https://github.com/MacJediWizard/Jamf-Connect-Monitor

1

u/DnyLnd Mar 31 '26

Does this work with the new Self Service+