Hello.
There is a script distributed by the policy:
echo "1 * * * * ~/userscript > /Users/$3/crontab
crontab -u "$3" /Users/$3/crontab
But it fails with an error:
Script result: crontab: tmp/tmp.3896: Operation not permitted
In the console, I add the terminal application to the full access list and it works from the terminal, but what can I add in privacy for policies?