Google Drive For Desktop Permission issues [Intel Macs + Big Sur]

[Cleve]

I have been scanning far and wide for a solution that fits just this particular group but I have not found it. I have been mislead with solutions on different processors and different software versions. So before help is given (thank you in advance) please note that I am looking for ONLY solutions that work for Intel based machines that is running Big Sur. 

Issue: 

Does anyone have a solution for this? 

[AntMac]

Setting up a configuration profile with Bundle ID PPPC settings works pretty well for these pop ups. I've tested this out my Intel BigSur device and it was working fine using the settings mentioned below. Was able to log in sync and perform all normal functions with only one standard user level pop up for network shares. Hopefully this works for you as well.  

I set up a basic config profile with these settings in the Privacy Preferences Policy Control Payload: 

Identifier: com.google.drivefs

Bundle ID: identifier "com.google.drivefs" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EQHXZ8M8AV

App or Service: 

SystemPolicyDownloadsFolder

Allow

SystemPolicySysAdminFiles

Allow

SystemPolicyNetworkVolumes

Allow

SystemPolicyDocumentsFolder

Allow

SystemPolicyDesktopFolder

Allow

SystemPolicyAllFiles

Allow

FileProviderPresence

Allow

SystemPolicyRemovableVolumes

Allow

[YanW]

thanks

[AntMac]

I did post a tested solution which involved defining a Configuration Profile with a Privacy Preferences payload using the App bundle ID to auto approve the extension. Some how this got marked as Spam?? 

Tested it on my machine which is a Big Sur Intel device running 11.6.1 and was working fine. I can try and repost the settings if you like but suspect it will get marked as spam again.  

[YanW]

can you post it again? hope it won't get mark as spam. 

[Cleve]

@AntMac My current tester is a Big Sur Intel computer running 11.6.1.(I reformatted and DEPd) Did you login to Google Drive For Desktop when you were testing? my pop-up still comes up and asks me to click 'allow' and then restart that computer. 

I followed your clear instructions:
Identifier:

com.google.drivefs

Bundle ID:

identifier "com.google.drivefs" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EQHXZ8M8AV

App or Service: 

SystemPolicyDownloadsFolder
Allow
SystemPolicySysAdminFiles
Allow
SystemPolicyNetworkVolumes
Allow
SystemPolicyDocumentsFolder
Allow
SystemPolicyDesktopFolder
Allow
SystemPolicyAllFiles
Allow
FileProviderPresence
Allow
SystemPolicyRemovableVolumes
Allow

[Cleve]

MY response was just marked as spam, @AntMac Did you login to Google Drive Desktop after the imaging process? I still get the pop-up with after logging in. 

[AntMac]

I was able to log into Google Drive Desktop no problems. Device was originally built with 11.5 and upgraded to 11.6 then 11.6.1. Google drive was not installed until I got to 11.6.1. Config profile was loaded after install of app but before launch.  

Wondering if maybe something is happening for you at application install? I did install the application manually not from JAMF Policy. Install performed on standard user account with Admin credential supplied to complete installation. Are you manually installing , using a composer created pkg or some other method?  If using a composer made pkg,  was it captured on a lower OS version? Do you have anything showing in System Information>Software> Disabled Software?