Productive morning getting the Mac FortiClient VPN software user installable1 via Jamf Self Service. Something we absolutely needed to have ready to go moving forward.
In most cases we don't allow end users to have administrator privileges on university machines.