https://github.com/jamf/makemeanadmin

Provides temporary admin access for a standard user via Jamf Self Service
https://github.com/jamf/makemeanadmin

Last synced: about 1 year ago
JSON representation

Provides temporary admin access for a standard user via Jamf Self Service

• Host: GitHub
• URL: https://github.com/jamf/makemeanadmin
• Owner: jamf
• Created: 2019-01-21T18:05:39.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2024-01-26T07:48:03.000Z (over 2 years ago)
• Last Synced: 2025-03-31T11:03:54.929Z (about 1 year ago)
• Language: Shell
• Size: 1000 Bytes
• Stars: 269
• Watchers: 26
• Forks: 67
• Open Issues: 20
• Metadata Files:
  • Readme: ReadMe.md

Awesome Lists containing this project

README

          
Make Me an Admin!

This script, when run, will allow a standard user to upgrade themselves to an admin for 30 minutes and then will grab a snapshot of the logs for the past 30 minutes as well so you can track what they did. 

The script will create a launch daemon to take care of demoting the user so that no matter how many times they log out or shut down, after 30 minutes of uptime, a script will be run to remove their admin privileges. 

It is recommended to push this script as a policy to self service to run only once per day.

Edits: If you wish to tailor the script to your own needs, here is where to make the changes.

User Prompt: Line 24 | Plain text

Default Message: You now have administrative rights for 30 minutes. DO NOT ABUSE THIS PRIVILEGE... 

Default Button: "Make me an admin, please!"

Time Frame for Admin Rights: Line 39 | Integer in seconds

Default: 1800 (30 minutes)

Time Frame for logs to be pulled:  Line 82 | String after the "--last" flag in minutes

Default: 30m

Location to save logs: line 82 | String after "--output" flag, must be valid directory

Default: /private/var/userToRemove/$userToRemove.logarchive