GitHub - SAP/macOS-enterprise-privileges: This application gives Mac users in enterprise environments control over the administration of their machines by elevating their access level to administrator

Privileges is a free, open-source macOS application by SAP that gives enterprise users temporary administrator rights on demand rather than permanent admin access. Version 2 adds features like automatic privilege revocation at login, unified expiration intervals, Smart Card/PIV token support, tamper protection, Touch ID for CLI, webhooks, AppleScript support, and localization in 41 languages. It supports macOS 11 through 26, works fully offline, and integrates with MDM for enterprise policy management. Using standard user accounts by default is a security best practice this tool enables without sacrificing usability.