SAP/macOS-enterprise-privileges

Privileges is a macOS application that grants users temporary administrator privileges on demand rather than permanent admin rights.

The tool addresses the security risk of running standard user accounts with permanent administrator access. It allows enterprise users to elevate their privileges for a defined timeframe to complete specific tasks like software installation or removal, then automatically revokes those rights. The application works entirely offline and integrates with mobile device management systems for centralized policy control across fleets of machines.

Organizations should adopt this tool if they operate in enterprise environments where security posture matters and they want to reduce the attack surface of their user machines. It suits teams that need to balance user autonomy with security best practices, particularly those already using MDM infrastructure. The tool is especially valuable for developers and other power users who regularly need administrative access but benefit from the additional security layer of standard user accounts. The application includes command line support, AppleScript integration, and webhooks for automation, making it suitable for organizations with sophisticated deployment and management requirements.

The project maintains active development with regular feature releases and platform support updates. The tool has expanded its capabilities significantly, adding tamper protection, smart card and PIV token authentication, privilege renewal workflows, and webhook support. The project provides localized interfaces across many languages and maintains compatibility across multiple macOS versions, including special handling for platform-specific compatibility issues. The team publishes detailed documentation and management guidance through the project wiki, supporting administrators in deployment and configuration.