This document outlines how to elevate permissions on a Mac with Jamf Connect after an admin request has been granted.

Prerequisites

  1. The device and user must be authorized for Administrator Promotion by the Office of Information Technology. 

  2. The device must have been built or enrolled by OIT after 08/20/2025. If your device was built or enrolled before this date, please contact the service desk about updating your device
    1. If you don't know if you have Jamf Connect, you can tell by your Mac login screen.  If you see the UCCS sign in page, like the picture below, then the device has Jamf Connect.
    2. If you do not have Jamf Connect, you may be able to install it from the pre-installed Self-Service app.  If neither Self-Service nor Jamf Connect are showing up, then the device will need to be brought to the Service Desk to reconnect it to our domain.
  3. The user must be logged in through or connected to Jamf Connect. This can be achieved by either:
    1. Signing-in through the Jamf Connect Login Window:



    2. Or selecting Connect from the Jamf Connect taskbar drop-down to sign-in with your UCCS email:


Administrator Promotion Tool

After your admin request has been processed and resolved, your device should automatically download the Admin Promotion Tool, provided it's connected to a campus network/VPN.  To use the Jamf Connect Administrator Promotion Tool:

  1. Ensure Jamf Connect is running in your taskbar. If not, open the Launchpad on your application menu and search for Jamf Connect:



    Then select the Jamf Connect application to run it in the taskbar.
  2. Select the Jamf Connect taskbar icon to view its options:



  3. Select Request Admin Privileges from the drop-down. You must enter the reason for your Administrator Promotion; this is recorded for review by the OIT Security Office.



  4. Enter your reason and select Continue.

  5. Select Leave On if you would like more accurately timed notifications related to your Administrator Promotion:



  6. A Jamf Connect notification will confirm you are now a local administrator:



  7. Since admin permissions are time limited, a Jamf Connect notification will also inform you when you are no longer a local administrator:




    You may repeat this process to request local administrator permissions as often as needed.



Troubleshooting

  • "Request Admin Privileges" button not appearing

    • Connect your device to a campus network or the VPN 
    • Ensure Jamf Connect is running in your taskbar. If not, open the Launchpad on your application menu and search for Jamf Connect:

  • "Jamf Connect wants to use your confidential information stored in "Jamf Connect" in your keychain"

    • This gives Jamf Connect the access it needs to mark your account as an administrator when you request it.  If this occurs, just input the password you logged into the Mac with (usually your UCCS password) and click "Always Allow". 
    • If it prompts you again, follow the same process until the prompts disappear
  • No labels