We deploy several macOS apps to specific users using Hexnode automation. The initial installation works, but when the apps later show an update prompt, end users are asked to enter admin credentials to continue. These users do not have admin access.
The apps are available in the Mac App Store, but we originally deployed them through Hexnode instead. Is there a way to avoid the admin credential prompt during app updates while still deploying the apps to selected users/devices?
20 Views
Hi @ethan_,
This behavior usually depends on how the macOS app handles updates and helper tools.
When an app is installed through Hexnode, the installation runs with elevated privileges. If the installer includes all required helper tools during installation, the user may not be prompted for admin credentials.
However, some macOS apps install or update helper tools only when the app is launched or updated by the user. In that case, the update process runs in the user context, not as root, so macOS may prompt the end user for admin credentials.
If the apps are available in the Mac App Store, the recommended approach is to deploy them as Apple VPP apps through Apple Business and Hexnode UEM. Once assigned as required apps, updates can be handled automatically without requiring the end user to provide admin credentials.
Best Regards,
Isabel Lora
Hexnode UEM
That makes sense. We set this up with automation because different users need different apps. Can VPP apps still be deployed that way, or does it have to be one common app list for everyone?
Yes, you can still deploy VPP apps to specific users or devices.
Add the apps from Apple Business as VPP apps in Hexnode, then assign them using the Required Apps policy to the intended devices or users. You can scope the policy based on your deployment structure, such as specific device groups, user groups, or automation workflows.
After the VPP app is assigned, macOS can install and update the app through the managed app workflow. Updates are typically applied after the device checks in or performs the next scan.
Best Regards,
Isabel Lora
Hexnode UEM
Do we need to buy licenses for free Mac App Store apps before deploying them as VPP apps?
For free Mac App Store apps, you still need to acquire licenses through Apple Business, but there is no cost. Once the free VPP licenses are added in Apple Business and synced to Hexnode, the apps can be deployed as managed VPP apps.
For apps that are not available in the Mac App Store, the admin prompt may still depend on the app’s own updater behavior. In those cases, check whether the app vendor provides a command-line update method or helper tool installation command that can be deployed with a script.
Best Regards,
Isabel Lora
Hexnode UEM
Don't have an account? Sign up
What's new 
