SAP Privileges is a native macOS enterprise utility that grants standard users temporary administrator rights on demand, with automatic expiration and policy-driven revocation. The application is implemented in Objective-C and is composed of multiple cooperating processes: a main GUI app, a menu bar agent, a privileged launch daemon, an XPC service, a helper tool for system extension management, an Endpoint Security system extension for self-protection, a CLI tool, and a Dock tile plugin. The actual privilege change is performed by the daemon using Collaboration Services to add or remove the current console user from the admin group, while the system extension protects the app's files and launchd jobs from tampering. Configuration is driven by NSUserDefaults and can be forced via MDM configuration profiles, supporting expiration intervals, authentication requirements (biometric, password, smartcard), renewal, revocation on login/lock/time change, and remote logging via RFC 5424 syslog or JSON webhooks.