SAP Privileges is a production-grade macOS utility suite for temporarily granting, automatically expiring, and revoking administrator rights. In normal operation, a user clicks the menu bar icon to request admin privileges for a configurable interval; a privileged daemon performs the actual group membership change via CSIdentity, and expiration is enforced by timers, login/logout hooks, screen-lock observers, and clock-change detection. The tool is designed for enterprise fleets where users run as standard users and elevation is a temporary, auditable, policy-governed act approved by IT via MDM configuration profiles. Architecturally, the system is a multi-process macOS application with strict privilege separation. The sandboxed GUI app communicates over XPC to a background agent (PrivilegesAgent), which owns policy evaluation, authentication (password, Touch ID, smart card/PIV), expiration timers, and remote logging. A privileged daemon (PrivilegesDaemon) mutates admin group membership; a privileged helper (PrivilegesHelper) manages the Endpoint Security system extension that protects the app's binaries and launchd plists from tampering; a Dock tile plugin (PrivilegesTile) gives quick status access; and a CLI (PrivilegesCLI) supports scripting with JSON status/history output. All IPC is brokered through an XPC service with code-signing validation on every connection. Policy is delivered via Apple .mobileconfig profiles exposing roughly 40 preference keys: expiration intervals, renewal policies, authentication requirements, revocation triggers, user/group exclusions, reason-required justification, post-change executables, and remote logging to RFC 5424 syslog or webhooks. The repository also ships a fully client-side web configurator (docs/index.html) that generates, validates, and imports signed mobileconfig profiles, including a custom ASN.1 DER/CMS parser for unwrapping PKCS#7 payloads. The codebase is Objective-C/AppKit, tightly coupled to macOS platform APIs (XPC, Endpoint Security, LocalAuthentication, Authorization Services, OpenDirectory) and requires Apple code-signing/notarization infrastructure. It has been actively maintained since 2016 (last commit 2026-10-12), supports macOS 12-27, and contains documented workarounds for Apple platform bugs. Technical drift is moderate: a few deprecated APIs (NSTask launchedTaskWithLaunchPath, private SecTaskValidateForRequirement declaration) and a large per-target build-config duplication exist, but the project tracks new macOS releases closely and the security-critical paths are carefully hardened.