Temp folder in Macos under root

I had a similar problem. I looked in my /etc/sudoers file and I saw these lines:

Defaults    env_reset
Defaults    env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR \
                        LS_COLORS MAIL PS1 PS2 QTDIR USERNAME \
                        LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
                        LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
                        LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
                        _XKB_CHARSET XAUTHORITY"

To get my environment variable to be there I had to add its name after "XAUTHORITY". In your case you would have:

Defaults    env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR \
                        LS_COLORS MAIL PS1 PS2 QTDIR USERNAME \
                        LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
                        LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
                        LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
                        _XKB_CHARSET XAUTHORITY LD_LIBRARY_PATH"

Give that a try.

Also make sure that you set BASH_ENV="~/.bashrc" in /etc/environment.

See this other answer for more details

You should automate the whole user account creation process.

You can use new-aduser in PowerShell which is part of the RSAT command-line tools to create user accounts, then you can use new-item to make the folder and get-acl and set-acl to modify the permissions on the new folder.

Sometimes the PowerShell ACL commands are a bit clunky. You could also call icacls.exe from your script if that's easier for you.