Using Privileges

Using Privileges

If you are a standard user and want admin rights, verify that Privileges is installed then use the following procedure:

1. Launch Privileges.

2. Click the Request Privileges button.

3. The Privileges dock icon should change to look like a yellow unlocked padlock.

4. A Privileges have been changed successfully message should appear.

5. The logged-in account should now have admin rights.

If you are a admin user and want to remove admin rights, verify that Privileges is installed then use the following procedure:

1. Launch Privileges.
2. Click the Remove Privileges button.
3. The Privileges dock icon should change to look like a green locked padlock.
4. A Privileges have been changed successfully message should appear.
   
5. The logged-in account should now be a standard user account.

Helper Tools

The following helper tools are installed to allow Privileges the necessary access rights to grant or remove admin rights:

*/Library/PrivilegedHelperTools/corp.sap.privileges.helper*

*/Library/LaunchDaemons/corp.sap.privileges.helper.plist*

For more information on privilege elevation using a privileged helper app and LaunchDaemon, please see the link below:

https://developer.apple.com/library/archive/documentation/Security/Conceptual/SecureCodingGuide/Articles/AccessControl.html