This workflow template streamlines the process of granting temporary admin rights to Mac users, ensuring compliance and security. Initiated via Slack, it verifies user identity, gathers justification for admin access, and checks device assignment. Approval is sought from the IT Security channel, and if granted, admin rights are provisioned through JAMF for a limited time before automatic revocation. This ensures controlled access while maintaining operational efficiency.
Trigger
Slack
Optional Triggers
["Microsoft Teams","Web Hook"]
Use Cases
Device \u0026 User Compliance
Workflow Breakdown
Verify Email address found in Slack
Ask for a reason for the admin rights request
Find computers that are assigned to the user by email address
Ask for approval in the Slack Security Channel
If approved, provide permissions in JAMF, wait and revoke permissions
If denied, notify user via Slack
Vendors
Slack, Utils, HTTP, Jamf
Workflow Output
Success/Failure
Tips
User asks bot "request-mac-admin" in Slack to start workflow
Use extended attributes in Jamf with policies to enable admin rights
Jamf policies setup to run when attributes are found with Smart Computer Groups