# Filter for local account, group or computer

**URL:** <https://community.netwrix.com/t/filter-for-local-account-group-or-computer/112725>\
**Category:** PolicyPak Ideas\
**Tags:** new, macos\
**Created:** [August 23, 2025, 3:20am UTC](https://community.netwrix.com/t/filter-for-local-account-group-or-computer/112725 "2025-08-23T03:20:00Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![VladCab](https://avatars.discourse-cdn.com/v4/letter/v/7ab992/32.png) [@VladCab](https://community.netwrix.com/u/VladCab)\
**Post date:** [August 23, 2025, 3:20am UTC](https://community.netwrix.com/t/filter-for-local-account-group-or-computer/112725/1 "2025-08-23T03:20:00Z")

</div>

### What is a one sentence summary of your feature request?

Create method to filter options for accounts groups and/or computers

### Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.

Their might be a need to have a local account in the admin group that can execute shell commands that may not be available to other local accounts.

### How do you currently solve the challenges you have by not having this feature?

I do not.

---

<div class="post-metadata">

**Author:** ![john.demianiuk](https://yyz1.discourse-cdn.com/netwrix/user_avatar/community.netwrix.com/john.demianiuk/32/212_2.png) [@john.demianiuk](https://community.netwrix.com/u/john.demianiuk)\
**Post date:** [August 29, 2025, 2:15pm UTC](https://community.netwrix.com/t/filter-for-local-account-group-or-computer/112725/2 "2025-08-29T14:15:46Z")

</div>

Hi Vlad,

Thanks for the input. Here’s a summary of your request for clarification:

> This request is for a policy rule capability that allows conditional application of permissions based on specific users or group membership.
> 
> **Use Cases:**
> 
> - Help desk agents may need to run diagnostic scripts for X application with `sudo`, which is currently not possible without explicit rules.
> 
> - An administrator may require a breakglass account to use `sudo -s` for recovery tasks (e.g., fixing a misconfigured sudoers file).
> 
> **Proposed Workflow:**
> 
> - If _User = AUser_, then apply or exclude a Policy/Collection.
> 
> - If _User is a Member of Admin_, then apply or exclude a Policy/Collection.
> 
> This flexibility would reduce manual workarounds and unnecessary escalations while ensuring controlled privilege elevation.

---

<div class="post-metadata">

**Author:** ![john.demianiuk](https://yyz1.discourse-cdn.com/netwrix/user_avatar/community.netwrix.com/john.demianiuk/32/212_2.png) [@john.demianiuk](https://community.netwrix.com/u/john.demianiuk)\
**Post date:** [August 29, 2025, 3:25pm UTC](https://community.netwrix.com/t/filter-for-local-account-group-or-computer/112725/3 "2025-08-29T15:25:35Z")

</div>

UPDATE: Already on there the roadmap! We have User and Group Support coming for macOS