Skip to content
Bart Reardon edited this page Jun 11, 2026 · 6 revisions

Excluding Users

If you want to exclude certain users from scripts that run in the login context (I.e. a local admin account or a static kiosk user), you can do so by updating Outset preferences.

The format is an array of usernames in the ignored_users dict:

{
    "ignored_users" = (
        Bob,
        Jane,
        Fred
    );
}

Note: This affects scripts run in the login context: login-once, login-every, login-privileged-once and login-privileged-every. It does not affect boot-*, login-window or on-demand scripts — on-demand scripts will still run in the current user context, even for excluded users.

Adding Users to Exclude

To add a username you want to exclude, use an MDM to deploy a configuration profile to the io.macadmins.Outset domain or create a boot-once script that runs Outset with the --add-ignored-user argument. You can string as many users as you want:

/usr/local/outset/outset --add-ignored-user FOO --add-ignored-user BAR

Or, you can add them individually:

/usr/local/outset/outset --add-ignored-user FOO
/usr/local/outset/outset --add-ignored-user BAR

Removing Users From Exclusion

To remove a username from the array, create a boot-once script that runs Outset with the --remove-ignored-user argument. You can string as many users as you want:

/usr/local/outset/outset --remove-ignored-user FOO --remove-ignored-user BAR

Or, you can remove them individually:

/usr/local/outset/outset --remove-ignored-user FOO
/usr/local/outset/outset --remove-ignored-user BAR

Clone this wiki locally