SAP Privileges

Set a fixed time interval after which administrator privileges expire and revert to standard user rights

Set a maximum time interval for a user to request administrative privileges

Specifies whether to allow biometric authentication in the PrivilegesCLI to obtain administrator privileges

If set, the PrivilegesAgent executes the given application or script and provides the current user's user name ($1) and its privileges (admin or user, $2) as launch arguments

If set to true, the application or script, specified in PostChangeExecutablePath, will only be executed if administrator privileges are granted to a user, but not the privileges are revoked.

Depends on: PostChangeExecutablePath

If set to true, the user's administrator privileges are revoked at login

By default, Privileges hides open windows to show the desktop and ensure that only the Privileges window is visible on the screen

Enforces certain privileges. Whenever Privileges.app or the PrivilegesCLI command line tool are launched, the corresponding privileges are set.

Sets a fixed timeout for the Dock tile's Toggle Privileges command. After this time, the admin rights are removed and set back to standard user rights. A value of 0 disables the timeout and allows the user to permanently toggle privileges.

Set a maximum timeout for the Dock tile's Toggle Privileges command. This generally works the same way as the DockToggleTimeout but allows the user to choose every timeout value up to the one specified. If set to 20 min. for example, the user may decide to set it to a value below 20 instead of being forced to use the 20 minute timeout.

Limits the usage of Privileges.app to the given user group.

Limits the usage of Privileges.app to the given user account.

If ReasonRequired is set to true, the user must provide a reason for needing admin rights.

Depends on: ReasonMinLength

Specifies the maximum number of characters the user can enter as the reason for becoming an admin

Depends on: ReasonRequired

Specifies the minimum number of characters the user has to enter as the reason for becoming an admin.

Depends on: ReasonRequired

If ReasonRequired is set to true, this key allows to pre-define a list of possible reasons (for becoming an admin) the user can choose from

Depends on: ReasonRequired

If set to true, the text the user enters for a reason is roughly parsed for valid words

Depends on: ReasonRequired

If set to true, the Settings button is no longer displayed in the app

If set to true, the Settings menu item is no longer displayed in the Dock tile's menu

If set to true, the Settings menu item is no longer displayed in the status item's menu.

If set to true, a Privileges status item is displayed in the Menu Bar.

Requires authentication before using Privileges.app. If set to true, the logged-in user is prompted to authenticate via Touch ID or by entering their account password.

Remote logging settings

—

Localization (de)

Localization (en)

Localization (es)

Localization (it)

Unlocalization

—

This will usually be an IP address, unless the syslog server is set up to respond using a DNS hostname.

If set to true, the log messages are sent via TCP instead of UDP. By default, messages are sent via UDP.

Syslog-specific options

Configure syslog facility.

Depends on: RemoteLogging.ServerType ∈ [syslog]

Configure syslog severity.

The port of the logging server.

Specify the maximum size of the syslog message (header + event message). If the syslog message is larger than the specified maximum, the message will be truncated at the end.