Skip to content

Frequently Asked Questions

Marc Thielemann edited this page Nov 20, 2024 · 6 revisions

Privileges Banner

Frequently Asked Questions

Why does the icon for Privileges.app change colors in the Dock?

This is by design. The icon is green and displays a locked padlock when you are a standard user. It looks like this:

The icon is orange and displays an unlocked padlock icon when you are an administrator. It looks like this:

By default, is there a time limit on the admin rights granted by Privileges?

Yes. By default, administrator privileges are granted for 20 minutes (if not configured otherwise). However, if necessary, you can configure Privileges not to remove administrator privileges by setting the expiration interval to “Never” in the app's settings.

How do I access logs for Privileges?

Privileges uses the system log for logging. To see all logs for Privileges in the Console app, you can filter for the Privileges process.

console_show_privileges_process

To see only the logging associated with changing admin rights in the Console app, you can filter for log messages containing SAPCorp.

console_show_privileges_process_filtered_for_admin

To access the same logs from the command line, the log command can be used. To see all logs for Privileges using the log command, the following command can be used:

log show --style syslog --predicate 'process BEGINSWITH "Privileges"'

log_show_privileges_process

To see only the logging associated with changing admin rights, the following command can be used:

log show --style syslog --predicate 'process == "PrivilegesDaemon" && eventMessage BEGINSWITH
"SAPCorp: U"'

log_show_privileges_process_filtered_for_admin

How do the app components communicate with each other?

In this illustration you can get an overview of how the different app components communicate with each other:

IllustrationAppComponents