Skip to main content

Configure Privacy Preferences Policy Control Profile

Privacy Preferences Policy Control is a feature that enables IT administrators to remotely manage privacy access for specific applications on enrolled macOS devices. This capability grants or denies permissions for certain functionalities, enhancing control over user data and application behavior.

note

This feature is supported on the devices running macOS version 10.14 or later.

To grant or deny privacy access for a specific application remotely on the enrolled device(s), follow these steps:

1. Navigate to SureMDM Web Console > Profiles > macOS > Add > Privacy Preferences Policy Control > Configure.

2. Enter a Profile Name and click Add.

3. On the Add App prompt enter the required settings and click OK.

SettingsDescription
App NameChoose an application from the list or click Add New App and enter the application name and package id. 
Code RequirementFetch the code from the Terminal by executing the command mentioned in the note on the console. 
Enable Static Code ValidationEnable this setting to statically validate the code requirement, enable this only if the process/app invalidates its dynamic code signature
Permissions
Contacts
Reminders
Camera
Bluetooth Always
Post Event
Screen Recording
Input devices
Speech Recognition
App Data
Documents Folder
Network Volumes
System Policy Administrator Files
Calendar
Photos
Microphone
Accessibility
System Policy All Files
File Provider Presence
Media Library
App Bundles
Desktop Folder
Downloads Folder
Removable Volumes

The application will be added under Privacy Preferences Policy Control section.

4. Click Save.

     The newly created profile will be listed in the Profiles section.

5. Go back to the Home tab and select the macOS device(s) or group(s).

6. Click Apply to launch Apply Job/Profile To Device prompt.

7. In the Apply Job/Profile To Device prompt, select the created profile and click Apply.