Hi folks, I tried several ways to create a policy allowing standard users on MacBook to update applications themselves (like Postman, Cursor, Kiro etc.). However, it still asks for admin credentials to update, which creates a bad user experience. How can I fix this?
12 Views
Replies (2)
Marked SolutionPending Review
Participant
1 day ago
Mar 18, 2026
Marked SolutionPending Review
I don’t think standard users can update apps on macOS. From what I know, updates usually need admin rights because they overwrite the app files.
Marked SolutionPending Review
Hexnode Expert
1 day ago
Mar 18, 2026
Marked SolutionPending Review
Hello everyone, thanks for reaching out.
On macOS, apps installed in the Applications folder are protected by system permissions. Standard users can run apps but cannot update them, since updates overwrite existing code. That’s why macOS prompts for admin credentials.
A better approach is to let Hexnode UEM handle updates silently. Here’s how you can set it up:
- Upload the new version of the app (.dmg, .pkg, or VPP app) to the Hexnode App Repository.
- Go to the Policies tab and create a macOS policy.
- Under App Management > Required Apps, add the new version of the app.
- Save the policy and associate it with the target devices.
Hexnode will then install the update in the background, without prompting users for admin credentials, since the UEM performs the installation with elevated privileges.
For more details, check out our guides on the Apple Volume Purchase Program (VPP), VPP apps deployment and the Requires Apps policy.
Regards,
Simon Scott
Hexnode UEM
Save
