Need Help to create Local Admin account in Apple Configurator to push out from Apple Business Essential, or create a .mobileconfig file for that

we are trying to gain access to the user's local files after he/she departed from company, just in case if some company data were stored in the user's profile.

I am thinking the alternative to push FileVault to our company owned machine, and has the key stored in ABE, and when the user departed, and manager requested to access the computer's local data, IT might connected the departed user's computer in Target mode, and unlock the machine with the recovery key, then copy the data out to another USB drive.

If local admin account is enforced like other MDMs, we can simply login to the departed user's laptop as the local admin, and then copy the user's data out directly.

I used Addigy before, and Addigy can do it too.

Basically, all 3rd party Apple MDMs can do it, but Apple Business Essential seems making it so hard to achieve if it's all possible.

Anyway, thanks a lot for your help @celliott147.

That's a deal breaker.

But thank you for the info @celliott147

Hi @celliott147,

Any idea if that is achievable with Apple Business Essential?

thanks a lot,