SAP Privileges is a native macOS enterprise utility that grants standard users temporary administrator rights on demand, with automatic expiration and policy-driven revocation. The application is implemented in Objective-C and is composed of multiple cooperating processes: a main GUI app, a menu bar agent, a privileged launch daemon, an XPC service, a helper tool for system extension management, an Endpoint Security system extension for self-protection, a CLI tool, and a Dock tile plugin. The actual privilege change is performed by the daemon using Collaboration Services to add or remove the current console user from the admin group, while the system extension protects the app's files and launchd jobs from tampering. Configuration is driven by NSUserDefaults and can be forced via MDM configuration profiles, supporting expiration intervals, authentication requirements (biometric, password, smartcard), renewal, revocation on login/lock/time change, and remote logging via RFC 5424 syslog or JSON webhooks.
IntuneManagement is a Windows desktop administration tool for Microsoft Intune/Endpoint Manager, built as a PowerShell/WPF application that authenticates via MSAL (Entra ID) and operates on tenant objects through the Microsoft Graph API (primarily the BETA endpoint). In production it provides export, import, copy, and comparison of Intune policies and configurations (including assignments, scope tags, and dependency resolution), bulk LOB app uploads with encrypted chunked transfer to Azure Storage, ADMX/ADML ingestion to generate custom registry-based policies, assignment usage reporting, and multi-format documentation generation (HTML, Markdown, Word, JSON, CSV) driven by a large embedded metadata catalog of policy schemas. The tool runs both interactively (WPF UI) and silently as a batch/DevOps job via command-line parameters and JSON settings files.