One Approved System Extensions Profile Or Multiple?

[john_sherrod]

Wondering what you all do when you need to whitelist multiple system extensions. So far I've only ever had a single configuration profile for white listing all of my needed system extensions. But sometimes only a small number of my users need a particular system extension approved so it doesn't seem like it makes sense to white list it for the entire fleet. How do you all handle these scenarios?

[sdamiano]

Separate profiles for separate extensions. It makes it a lot easier when its time to revoke one. You don't have to redistribute to the whole fleet.

[john_sherrod]

That's kinda what I was thinking. Thanks! Would be curious to hear from others as well how they handle it.