Use this guide for adding a computer to the temporary administrator privileges for Mac computers.  Once this process is complete, this allows an end user to enable temp admin through intelligent hub (not Manifest) to elevate privileges on their Mac.  See these instructions for the end user's side: https://confluence.med.wisc.edu/x/DoDjAg) 

Step-by-step guide

Add the steps involved:

1. Sign into mdm.wisc.edu using AD\netID and then navigate to Groups & Settings > Groups > Assignment Groups
   
   
   
   
2. search for temp admin.  Click on SSIT-TEMP Admin
   
   
   
   
3. Type in the computer name and add the device (note, device must already be in MDM).  Click Next, then Click Publish.  Changes should sync to the client usually within 15 minutes.
   
   

Related articles

https://confluence.med.wisc.edu/x/DoDjAg