Purpose
The purpose of this knowledge article is to guide administrators on granting Full Disk Access (FDA) to applications on macOS devices using SureMDM. Full Disk Access allows approved applications to access protected files and folders on the device, enabling them to function correctly while maintaining organizational security and compliance.
Prerequisites
- Access to the SureMDM Console with administrator privileges
- macOS devices enrolled in SureMDM
- The target application installed on the managed macOS device
- Bundle ID and Code Requirement details of the application
Steps
- Login to the SureMDM Console.
- Navigate to Profiles.
- Select macOS and click New Profile.
- Select Device enrollment and Automated Device enrollment
- Go to Security.
- Open Privacy Preferences Policy Control (PPPC).
- Click Add to configure a new application permission.
- Enter the required application details:
- Application Name
- Code Requirement
- Under Permissions, select System Policy All Files.
- Set it to Grant
- Apply the profile to the required macOS devices.
Obtaining the Code Requirement
To configure Full Disk Access correctly, the application’s Code Requirement must be specified in the PPPC profile.
- Open the Terminal application on the macOS device.
- Run the following command:
codesign –display -r – /path/to/app/binary - The command output will display a line similar to:
designated => identifier “com.company.application” and anchor apple generic … - Copy everything that appears after => and use it as the Code Requirement value while configuring the application in the PPPC profile.
Conclusion
By configuring Privacy Preferences Policy Control (PPPC) profiles in SureMDM, administrators can grant Full Disk Access to specific macOS applications. Since Full Disk Access permissions are application-specific, each required application must be individually configured within the profile using the correct Bundle Identifier and Code Requirement to ensure successful deployment and functionality.
Need more help? Here’s how to get help from our experts.