Agents on macOS Systems

This section of the Verify Privilege Manager documentation covers information and step procedures pertaining to Verify Privilege Manager agents installed on macOS.

The following topics are available:

• Agent Configuration
• Agent Hardening
• Modify Update Agent Commands (macOS) Policy
• macOS Agent Utility Preference Pane
• Terminal Commands
• Finding Logs without using the Agent Utility
• Using an MDM Profile for your Agent
• Troubleshooting

Processes Run by Agents

All these executables can be found within the Privilege Manager.app bundle in the /Applications folder.

Privilege Manager, as a "launch agent," runs under the user account when you log in; it handles displaying notifications, advanced message windows, and the menu bar icon (if enabled).

The other processes all run as root, which is necessary for them to perform their tasks. The com.delinea.acsd and pmcored processes will be launched by the system on startup; the other daemons are launched "on demand," as required.

• Background application or "agent" (macOS term)

  • Privilege Manager

• System extension (runs in background)

  • com.delinea.acsd

• primary "launch daemon" (background process)

  • pmcored

• Other launch daemons

  • pmeventprocessord

  • pmeventuploaderd

  • pmfileinventoryd

  • pmlocalsecurityd