Mac Sudo Manager
Posted: Thu Mar 14, 2024 8:19 pm
Homebrew does not require permissions to install most packages but there are some packages that require permissions to install. These packages tend to be requesting access to privileged devices or wants to create a background service. It these cases, allowing APM to provide permissions allows the install or update of these packages.
By Default, APM will use a local variable (%lastuser%) to install packages, if the Sudo Account is not set for agent.
The Mac Sudo Manager allows you to manage different Sudo user accounts and passwords across your RMM environment. The users and passwords are used during the install and update processes inside Automate. If a Sudo User is not provided for the agent, then Automate will attempt to use the variable (%lastuser%) in the place of a set Sudo User account.
To Access the APM Sudo Manager, Navigate to Enable Agents in the main plugin and select the Mac Sudo button
That will open the Mac Sudo Manager
Here you can view all current Mac agents and the Sudo User currently in use.
You can add, edit, or delete Sudo user account, Provide a friendly name for the account, the usename and password and save to Automate. Automate will encrypt the password when storing it in Automate.
You can assign Sudo users to one or more agents at a time by selecting the Sudo account and selection 1 or more agents from agent list.
You can see the Sudo assignments as a EDF under the Agent. You can remove or change the value of this EDF to match any Sudo Account Automate is managing manually. You can alos use the Assign Sudo tool to assign and remove Sudo Accounts from agents.
By Default, APM will use a local variable (%lastuser%) to install packages, if the Sudo Account is not set for agent.
The Mac Sudo Manager allows you to manage different Sudo user accounts and passwords across your RMM environment. The users and passwords are used during the install and update processes inside Automate. If a Sudo User is not provided for the agent, then Automate will attempt to use the variable (%lastuser%) in the place of a set Sudo User account.
To Access the APM Sudo Manager, Navigate to Enable Agents in the main plugin and select the Mac Sudo button
That will open the Mac Sudo Manager
Here you can view all current Mac agents and the Sudo User currently in use.
You can add, edit, or delete Sudo user account, Provide a friendly name for the account, the usename and password and save to Automate. Automate will encrypt the password when storing it in Automate.
You can assign Sudo users to one or more agents at a time by selecting the Sudo account and selection 1 or more agents from agent list.
You can see the Sudo assignments as a EDF under the Agent. You can remove or change the value of this EDF to match any Sudo Account Automate is managing manually. You can alos use the Assign Sudo tool to assign and remove Sudo Accounts from agents.