Allowing Access to Security & Privacy for Machines OS 10.13.6 and less

romanne3
New Contributor

I was told you can ONLY use PPPC on machines that are 10.14 and higher... is there a way to allow the same (For example: allowing Bomgar (or any other app) access to SysPreferences > Security & Privacy > Accessibility) for machines are less than 10.14.X. I have several machines that are 10.13.6 ,10.12.X, and 10.11.X.

1 REPLY 1

Hugonaut
Valued Contributor II

The "old school" way is not possible in 10.13 or 10.12 - tcc.db / sqlite3 database read only. They made this change sometime in 2016. You should still be able to deploy a .mobileconfig /configuration profile to the computers to achieve what you want. (Someone correct me if I'm wrong with the .mobileconfig statement) You can still modify the db on your el cap machines & can be automated via script.

basically...you should update to mojave and save yourself some headache!

The information you were provided is indeed correct. Only in 10.14

https://support.apple.com/en-us/HT209028

You can allow apps to access certain files used for system administration, and to allow access to application data. For example, if an app requests access to your Calendar data, you can allow or deny the request. MDM administrators can manage these requests using the Privacy Preferences Policy Control payload, as documented in the Configuration Profile Reference.

https://developer.apple.com/business/documentation/Configuration-Profile-Reference.pdf - Page 64

86ca87183c1940e6b5c73362ba48a12b

________________
Looking for a Jamf Managed Service Provider? Look no further than Rocketman
________________


Virtual MacAdmins Monthly Meetup - First Friday, Every Month