Privilege Elevation

Jamf Connect Documentation

Solution
Application
Jamf Connect
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Self Service+ (formerly the Jamf Connect menu bar app) allows standard users to initiate a temporary elevation to a local administrator. Upon activation, a timer will appear in the user's menu bar for the duration of their session. The user is able to conduct any actions available to local administrators during the temporary elevation. When the timer ends, the user will be returned to a standard user. This feature can be added to your Self Service+ configuration with the Temporary User Promotion (TemporaryUserPromotion) setting manually or via the Jamf Connect Configuration app. Temporary elevation features can also skip user and role verification for Self Service+ configurations without an identity provider (IdP) configured.

Users can also initiate or conclude a temporary elevation to a local administrator via the command line with the following commands: jamfconnect acc-promo --elevate and jamfconnect acc-promo --demote. For more information, see Elevate macOS Privileges for Users via Jamf Pro Policy.