We manage macOS devices in hexnode and some users sign in with their Google workspace account using the work account login flow. After the user is created on the Mac, I use the Hexnode action from the portal to change the local user role to Administrator.
The action shows as successful and the user appears as admin at first. However, on some Macs, the same user shows up as a standard user again after a day or two. It is not happening consistently across all devices—one test Mac kept the admin role, while another reverted back to standard.
There are no scripts or policies that we intentionally configured to downgrade the user. Has anyone seen this with Google Workspace-linked macOS accounts or Hexnode local account management?