Body
How to Use Admin By Request
Service Overview
Description
Admin By Request (ABR) is a self-service privilege management tool for macOS. It allows users to perform actions on their Mac that require administrator privileges without operating as a full-time administrator, a known security vulnerability frequently exploited by malware. Instead, users can elevate their privileges temporarily when needed.
Eligibility & Access
| Who can use this? |
Users of university-managed Apple devices (macOS). |
| How to Access |
Pre-installed on managed Macs via Iru. Accessible from the macOS menu bar or Applications folder. |
Usage
To request administrator privileges for installing software or changing system settings:
- Open the Admin By Request window by clicking the menu bar item and selecting Request administrator access (or open it from your dock/Applications folder).
- Enter your UA email address, phone number, and a brief description of what you intend to do.
- Click OK. You are granted a 30-minute administrator session. A timer will appear on your desktop.
- Even during an active session, you must still enter your password when macOS prompts you for authentication. Admin By Request elevates your privileges, but it does not bypass the authentication prompt.
Note on Sudo / Terminal Access: By default, sudo access is restricted in the Terminal, even during an active Admin By Request session. If your work requires Terminal/sudo privileges, please submit a 'Modify Account Access' request.
Offline Access: Admin By Request does not require a VPN or an active internet connection to function. It will grant offline sessions and sync with the server once connectivity is restored.