Privileges overview
- Privileges is an application that allows users to work as a standard user for day-to-day tasks, by providing a quick and easy way to request administrator rights. Users can set a timeframe in the application’s settings to perform specific tasks, such as installing or removing an application. To request admin rights, simply click on the Privileges icon in your Dock. Command line use is supported as well.
- Working as standard user instead of an administrator adds another layer of security to your Mac and is considered a security best practice. We believe all users, including all developers, can benefit from using Privileges.
What's new in version 2.5.2
- We added some new management keys:
- RevokeAfterTimeChangeExcludedUsers excludes users from automatic privilege revocation after the system time changed (if enabled using the RevokePrivilegesAfterSystemTimeChange key).
- RevokeOnScreenLockExcludedUsers excludes users from automatic privilege revocation on screen lock (if enabled using the RevokePrivilegesOnScreenLock key).
- AutomaticRevocationExcludedUsers excludes users from any automatic revocation. This key is evaluated before the keys RevokeAtLoginExcludedUsers, RevokeAfterTimeChangeExcludedUsers, RevokeOnScreenLockExcludedUsers, and any other automatic revocation key that may be introduced in the future. If a user is listed in the AutomaticRevocationExcludedUsers key, the other keys are not evaluated. When used with a client management system that supports variables in configuration profiles, variables such as $USERNAME can be used here.
- The PrivilegesDaemon now uses its own logging subsystem. If you want to access the log entries for privilege changes, you can do so by entering the following command: log show --predicate 'subsystem == "corp.sap.privileges.daemon" AND category == "privchange"'. Additionally, the installer package ensures that these log entries are written to the persistent log store, making them available for a longer period than in previous versions of Privileges.