Skip to main content

How to Change a Device Account Permission Level

Updated this week

Swif allows administrators to manage local user account permission levels on enrolled devices. You can switch an account between Standard and Admin, either permanently or for a limited time.

This is useful for granting temporary administrative access while maintaining long-term security and compliance.


What Are Account Permission Levels?

Standard Account

Standard users:

  • Cannot add or modify other user accounts

  • Cannot install system-wide applications

  • Cannot change critical system settings

This is the recommended default for most users.

Admin Account

Admin users:

  • Can install and remove system-wide applications

  • Can change system settings

  • Can manage other local user accounts

Admin access should be limited and carefully controlled.


How to Change an Account’s Permission Level

Step 1: Open the Device

  1. Go to Device Management → Devices

  2. Select the target device

  3. Open the Accounts tab


Step 2: Open Account Actions

  1. Locate the user account you want to modify

  2. Click the three-dot menu (⋮) on the right side of the account row

  3. Select Change Permission Level


Step 3: Choose the New Permission Level

In the Change Permission Level dialog:

  • Review the current permission level

  • Select Standard → Admin or Admin → Standard

  • Confirm the direction of the switch

Swif clearly indicates what capabilities change when switching roles.


Optional: Schedule a Temporary Admin Access

Swif supports time-bound privilege escalation.

  1. Enable Schedule Temporary Change

  2. Set the duration (in hours)

  3. After the timer expires, the account automatically reverts to its original permission level

This is ideal for:

  • Temporary troubleshooting

  • Software installation

  • Short-term IT tasks


Save Changes

Click Save Changes to apply the update immediately.

Changes are enforced on the device once it checks in.


Best Practices

  • Keep most users as Standard

  • Use temporary Admin access instead of permanent elevation

  • Regularly review admin accounts for compliance

  • Pair with device security and audit logging policies


Troubleshooting

  • Ensure the device is enrolled and online

  • Permission changes require supported OS-level account management

  • If changes don’t apply immediately, allow time for device sync


Summary

Swif’s account permission management lets you:

  • Securely control admin access

  • Reduce long-term privilege risk

  • Grant just-in-time admin rights when needed

This approach helps organizations balance security, usability, and compliance across managed devices.

Did this answer your question?