You can change a macOS user's role between standard and admin directly from Addigy using a terminal command run through the GoLive or Devices page. This is useful when you need to adjust access levels on a managed device without interacting with it directly.
Note: You will need the user's Account Name, not their Full Name. These may differ — the Account Name is the short username used to identify the account in macOS (e.g.,
jsmith, notJohn Smith).
How to Run the Command
- Navigate to the Devices page and select the target device(s).
- Paste the appropriate command (below) into the Run Command box and click Send.
OR
- Navigate to the target device's GoLive page > Scripts tab.
- Paste the appropriate command (below) into the Run Command box and click Send.
Commands
Promote a standard user to admin
Replace USERHERE with the user's Account Name.
sudo dseditgroup -o edit -a "USERHERE" -t user admin
Demote an admin to standard user
Replace USERHERE with the user's Account Name.
sudo dseditgroup -o edit -d "USERHERE" -t user admin
Tip: Test commands on a non-production device first to confirm expected behavior before running them across your fleet.
Need to Grant Admin Access Temporarily?
If you only need to elevate a user's privileges for a limited time, see How to Grant Temporary Admin Status for a dedicated workflow.