Configuration Profile for Adobe Apps

[cwcampb]

I'm looking to see if anyone has a configuration profile created that gives ALL Adobe Apps access to Desktop, Documents, Downloads, and External Media. We're managing classroom computers with the Adobe Suite and each time a new user logs and launches an Adobe application it asks for access to those folders.

Thank you!

[mickgrant · Accepted solution]

You can create the PPPC profile you need with PPPC-Utility
Just install the software you want to allow, add it to the side pane of the PPPC utility, and select your desired permissions.

[AJPinto]

You just need a Privacy Preferences Policy Control Configuration Profile to give permission to the desktop. You will need the App Identifier, Code Requirement and the service is SystemPolicyDesktopFolder access type allow. Looks like you will need one PPPC App Access for each of Adobe's identifiers, but it would still be a single Configuration Profile.

There are several ways to get the App Identifier and Code Requirement. I find it easiest to just an application called Show Me your ID.

HCS Technology Group - Show Me Your ID 3.0 (hcsonline.com)

For just Adobe Creative Cloud, the Configuration Profile should look something like this.

[cwcampb]

Thanks everyone I've used PPPC-Utility before for this but was just checking to see if someone already had a config profile built for ALL Adobe Apps. If I need too I'll create a profile for each app but assuming there is an easier way of doing this.

[AJPinto]

You should not need a separate configuration profile for each app. Click the "+" in the right-hand side of the window and add more App Access items. Keep unrelated apps separate (ie Office, and Chrome), but this is all Adobe stuff.

[Qwheel]

I'm confused, why are you guys doing this?

In our environment, we get on just fine without a PPPC for all Adobe apps.
Users are standard users, shared and single use devices.

What app actually complains without full disk access, or screen recording configurations?

[Ahadub]

Adobe Premiere is complaining to one of my standard users. So google brought me here to come up with the profile.  Surprised that Adobe does not have one pre-cooked up to use but that might be farther down on the google search results.

[Ahadub]

This has a lot of information

https://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide_Mac/index.html 

[cwcampb]

We are managing classroom labs. A total of 12 labs with x20 M1 iMacs. If a user denies access on launch of an Adobe application they will need admin priviledges to change access which then requires a reboot of the machine and a wipe of the user account to start fresh for that user. It is a pain and we've had students call our helpdesk quite often because they don't know if it's safe when the dialog pops up for access to Desktop, Downloads, or Documents folder.