Configure Privacy Preferences Policy Control Profile
Privacy Preferences Policy Control is a feature that enables IT administrators to remotely manage privacy access for specific applications on enrolled macOS devices. This capability grants or denies permissions for certain functionalities, enhancing control over user data and application behavior.
Supported OS Version: macOS 10.14 or later
To grant or deny privacy access for a specific application remotely on the enrolled device(s), follow these steps:
1. Navigate to SureMDM Web Console > Profiles > macOS > Add > Privacy Preferences Policy Control > Configure.
2. Enter a Profile Name and click Add.
3. On the Add App prompt enter the required settings and click OK.
| Settings | Description |
|---|---|
| App Name | Choose an application from the list or click Add New App and enter the application name and package id. |
| Code Requirement | Fetch the code from the Terminal by executing the command mentioned in the note on the console. |
| Enable Static Code Validation | Enable this setting to statically validate the code requirement, enable this only if the process/app invalidates its dynamic code signature |
| Permissions | Contacts - Default/Grant/Deny Reminders - Default/Grant/Deny Camera - Default/Deny Bluetooth Always - Default/Grant/Deny Post Event - Default/Grant/Deny Screen Recording - Default/Deny/Request User Content Input devices - Default/Deny/Request User Content Speech Recognition - Default/Grant/Deny App Data - Default/Grant/Deny Documents Folder - Default/Grant/Deny Network Volumes - Default/Grant/Deny System Policy Administrator Files - Default/Grant/Deny Calendar - Default/Grant/Deny Photos - Default/Grant/Deny Microphone - Default/Deny Accessibility - Default/Grant/Deny System Policy All Files - Default/Grant/Deny File Provider Presence - Default/Grant/Deny Media Library - Default/Grant/Deny App Bundles - Default/Grant/Deny Desktop Folder - Default/Grant/Deny Downloads Folder - Default/Grant/Deny Removable Volumes - Default/Grant/Deny |
The application will be added under Privacy Preferences Policy Control section.
4. Click Save.
The newly created profile will be listed in the Profiles section.
5. Go back to the Home tab and select the macOS device(s) or group(s).
6. Click Apply to launch Apply Job/Profile To Device prompt.
7. In the Apply Job/Profile To Device prompt, select the created profile and click Apply.