BeyondTrust Remote Support - Sequoia - Remote Desktop

Beyond Trust outlines it here: https://docs.beyondtrust.com/pra/docs/deploy#set-privacy-policy-preference-control

We too have seen this, so far I don't believe there is a PPPC that can configure this, or if there is a key from Apple that can be used, MDM tools such as Jamf have not implemented it yet. I think this is part of the newer way of doing screen capture/share API from Apple, but possibly undocumented or poorly documented setting and how it can be used/implemented. 

I did some research online and found this post from someone else on Reddit:

We have a similar issue with Beyond Trust / Bomgar:

The PPPC for Bomgar is working. The interactive button to open the panel is *NOT* working correctly.

If the client is prompted to allow "Remote Desktop" they will be prompted for admin credentials. 

Ask them to hit cancel and click *BACK*. Open the "Screen & System Audio Recording" panel and allow the app/utility THERE.

---

I can tell you that we too do the same, we just ignore the Remote Desktop part, and only tell the user to allow for "screen sharing". I also want to say that this is present in macOS 14 as well, not just macOS 15. 
Sorry, wish I could be of more help. 

Hello,

We just upgraded BeyondTrust Remote Support to 25.2.2.

Any update on how to allow Remote Access PPPC without user interaction ?

​@a_westermeyer Not possible. Starting with macOS 10.15 (Catalina), Apple removed the ability to pre-approve Screen Recording and Remote Desktop access via MDM or PPPC profiles. These permissions must be granted interactively by the user.

Your only options are:

•  Disallow the app entirely via PPPC (deny access)

•  Allow user approval without requiring admin credentials (set Authorization to AllowStandardUserToSetSystemService)

There is currently no supported method to silently grant these permissions via MDM. This is an intentional security design by Apple to prevent remote control without user consent.

I believe ​@adonboli may be referencing the ScreenCaptureKit changes in macOS 15, which introduced recurring user notifications for apps using legacy screen capture APIs. These prompts were initially daily, then weekly, and eventually monthly before Apple added an MDM key in late beta (September 2025) to suppress the notifications. This change affects notification behavior, not permission granting, and is unrelated to PPPC access control.

https://developer.apple.com/documentation/devicemanagement/privacypreferencespolicycontrol/services-data.dictionary/identity

Authorization

string

The Authorization key is an optional replacement for the Allowed key, which has one of the following possible values:

• Allow: Equivalent to a true value for the Allowed key

• Deny: Equivalent to a false value for the Allowed key

• AllowStandardUserToSetSystemService: Allows a standard (non-admin) user to configure the permissions for the specified app in the Privacy preferences for services that otherwise require admin authorization; only valid for the ListenEvent and ScreenCaptureservices

​@AJPinto Thanks a lot for your very clear explanation !