Intro to user account types
You might encounter users who are having issues with their user accounts on macOS. Common scenarios include account login issues, password resets, or confusion about user account privileges.
It’s important to understand how to manage user accounts, including creating, modifying, and deleting them as needed. You should be familiar with the different types of user accounts, such as administrators, standard users, and their specific access levels.
Note: A device management service can configure these settings. For more information about your organization’s requirements and device policies, check with your device management administrator.
Local user account types on macOS
macOS supports several local user account types, each with different levels of access and permissions. Here’s a list of four common local user accounts:
Administrator: An administrator account on a Mac has full control over the system, allowing the user to install software, change system settings, and manage other user accounts. Typically, the first account created during the Mac setup process is granted administrator privileges. While it’s essential to have at least one administrator on the system, it’s recommended not to use this account for daily activities to minimize security risks. Using a standard account for everyday tasks helps protect the system from potential threats or accidental changes.
Standard: A standard user account is designed for everyday use, allowing individuals to change their own personal settings and use installed apps. However, it doesn’t have the permissions needed to manage other user accounts or make critical changes to system settings. The standard user account helps maintain overall system stability and security by limiting access to sensitive areas of the operating system.
Guest: A guest user account provides temporary access to a Mac computer without requiring a password, making it useful for occasional or short-term users. This account is highly restricted—it can’t install apps or make changes to system settings—and all data created during the session is automatically deleted upon logout. To turn on the guest account, go to System Settings > Users & Groups > Guest User. This feature is helpful for maintaining security and privacy while still offering basic access when needed.
Sharing Only: A sharing-only user account can access only shared files or services (like screen sharing or printer sharing) remotely over a network. To give someone limited access to a computer, you can create a sharing-only user account to only give the person access to files and folders you specify.
Note: A device management administrator can create a hidden managed administrator account on a Mac. For more information, see set up local macOS accounts in Apple Platform Deployment.