datajar.mobi Local Admin Rights Management

Introduction

Please note: This article pertains to a new version of this process that is currently being rolled out to customers. Please refer to this article for the previous version of this process if the described options do not appear in the Support application. 

This article is intended for datajar.mobi technical contacts and their end users. 

It is possible for datajar.mobi to provide a solution for end users to manage their local administrator privileges on their Mac computer (promote / demote themselves from standard user to local administrator). This process will make an option available to all local users on that specific computer.

Process to Enable End User Promotion

As a datajar.mobi customer, you have control over enabling this capability for your end users:

1. If you have access to Jamf Insights, you can enable the functionality by navigating to Computers > Select the desired computer > Management Actions > toggle the "Administrator rights" option.
2. Once toggled, select the "Save" button

For more information on Jamf Insights, please see the Jamf Insights Guide.

End-User Process

Once enabled, users can manage their local administrator privileges by clicking the Support application icon in the Menu Bar, then choosing the "Local Admin" button:

• If they are a standard user, they will be prompted with the option to promote themselves to a local administrator.
• If they are a local administrator, they will be prompted with the option to demote themselves to a standard user.

Process to Demote Local Users

For computers that have enabled Administrator rights, it is also possible to demote all local users (except for service accounts) to standard users and remove their local admin privileges to prevent them re-promoting themselves:

1. If you have access to Jamf Insights, you can disable the functionality by navigating to Computers > Select the desired computer > Management Actions > toggle the "Administrator rights" option.
2. Once toggled, select the "Save" button

The Support app "Local Admin" option will no longer be available to the user with immediate effect and if they are a local administrator, they will be demoted to a standard user after a short delay, or immediately when they next log in.