The "Compliance - Provide Temporary Device Admin to Mac Users (JAMF)" workflow template streamlines the process of granting temporary admin rights to Mac users. Initiated via Slack, it verifies user identity, gathers justification for the request, and identifies associated devices. The workflow seeks approval from the IT Security channel, and if granted, temporarily assigns admin rights through JAMF, automatically revoking them after a set period. This ensures compliance and security while facilitating necessary administrative tasks.
Trigger
Slack
Optional Triggers
["Microsoft Teams","Webhook"]
Use Cases
Device \u0026 User Compliance
Workflow Breakdown
Verify Email address found in Slack
Ask for a reason for the admin rights request
Find computers that are assigned to the user by email address
Ask for approval in the Slack Security Channel
If approved, provide permissions in JAMF, wait and revoke permissions
If denied, notify user via Slack
Vendors
Slack, Utils, HTTP, Jamf
Workflow Output
Success/Failure
Tips
User asks bot "request-mac-admin" in Slack to start workflow
Use extended attributes in Jamf with policies to enable admin rights
Jamf policies setup to run when attributes are found with Smart Computer Groups