Create Workstyles

The Workstyle Wizard guides you through the process of creating a Privilege Management for Mac Workstyle. The options you select determine the function of the Workstyle.

  1. Navigate to the OS X > Workstyles node.
  2. Right-click the Workstyles node, and then click Create Workstyle on the top-right. The Workstyle Wizard is displayed.
  3. You can optionally enter a license code at this stage or you can enter it later once the Workstyle has been created.
  4. You can choose from Controlling or Blank for your Workstyle. A controlling Workstyle allows you to apply rules for access to privileges and applications. A blank Workstyle allows you to create an empty Workstyle without any predefined elements. If you select a blank Workstyle, the next screen is Finish as there is nothing to configure.
  5. Filtering (Controlling Workstyle only). This determines who will receive this Workstyle. You can choose from Standard users only or everyone. If you apply it to everyone, it will apply to Administrators. You can modify the filters and apply more detailed filtering once the Workstyle has been created.
  6. Capabilities (Controlling Workstyle only). Allows you to choose Privilege Management, Application Control, or both. If you don't select either capabilities, the next screen is Finish. This Workstyle would only contain filtering information.
  7. Privilege Management (Controlling Workstyle with the Privilege Management capability). Allows you to choose how you manage Authorization prompts including sudo control and Installer privileges.

If you select Present users with a challenge code from the dropdown, you are prompted to configure the challenge and response functionality at the end of creating your Workstyle, if your policy doesn't already have one.

  1. Application Control (Controlling Workstyle with the Application Control capability). Allows you to choose:
    • How you want to apply application control. You can choose from an allowlist or blocklist approach. We recommend you use an allowlist approach.
      • As an allowlist: How you want to handle non-allowed applications.
      • As a blocklist: How you want to handle blocked applications.
  2. Finish. Allows you to enter a Name and Description for your new policy. If the Workstyle has been configured to use a Challenge / Response message and the policy doesn't have an existing key, you will be asked to set a key. You can check the box on this screen to activate this Workstyle immediately or you can clear the box to continue configuring the Workstyle before you apply it to your endpoints.

Depending on the type of Workstyle you create and any capabilities that have been included, Privilege Management for Mac will auto-generate certain Application Groups (containing rules) and Messages. Filters are applied and subsequently configured as part of the Workstyle.

For more information, please see the following sections:

Disable or Enable Workstyles

You can enable or disable Workstyles to stop them from being processed by Privilege Management for Mac.

To enable or disable a Workstyle:

An image example Workstyle configuration where the General Rules Workstyle is enabled and the High Flexibility Workstyle is disabled.

  1. Navigate to the policy and select the Workstyles node. You can see which policies are disabled and enabled in the list.
  2. Right-click on the Workstyle and click Disable Workstyle to disable it or Enable Workstyle to enable it.


In the above example, the General Rules Workstyle is enabled and the High Flexibility Workstyle is disabled.

Workstyle Precedence

If you have multiple Workstyles, they are evaluated in the order they are listed. Workstyles that are higher in the list have a higher precedence. Once an application matches a Workstyle, no further Workstyles are processed for that application, so it is important you order your Workstyles correctly, because an application could match more than one Workstyle.

To change the precedence of a Workstyle:

  1. Select the Workstyles node in the left pane.
  2. Right-click and choose from the options:
    • Move Top
    • Move Up
    • Move Down
    • Move Bottom