This workflow automates the process of granting temporary admin permissions to Mac users via JAMF, initiated by a Slack request. It begins with verifying the requester's email, then collecting a justification for the admin rights requirement. If a computer is assigned to the user, a Slack Security Channel is prompted for approval. Upon approval, permissions are granted in JAMF, monitored, and later revokedâmaintaining compliance and control throughout the process.
Trigger
Slack
Optional Triggers
"Microsoft Teams","Web Hook"
Use Cases
null
Workflow Breakdown
Verify Email address found in Slack
Ask for a reason for the admin rights request
Find computers that are assigned to the user by email address
Ask for approval in the Slack Security Channel
If approved, provide permissions in JAMF, wait and revoke permissions
If denied, notify user via Slack
Vendors
Slack, Utils, HTTP, Jamf
Workflow Output
Success/Failure
Tips
User asks bot \"request-mac-admin\" in Slack to start workflow","Use extended attributes in Jamf with policies to enable admin rights","Jamf policies setup to run when attributes are found with Smart Computer Groups