In macOS Ventura, Apple released a new MDM Profile called Service Management.
This MDM Profile controls the `Login Items` and ensures the user is not prompted during installation and cannot disable the application from running.
Here are some example prompts a user would see for new Login Items added:
You can build this MDM Profile by navigating to Catalog > MDM Profiles > Service Management Profile:
This profile requires you to have some form of a unique identifier for the relevant app/binary, such as the Team Identifier or Bundle Identifier. The type you wish to use is defined in the Rule Type selection box. Then, you want to paste the identifier in the Rule Value text box.
If you need to gather the Team ID or Bundle ID for your app/binary, follow the steps highlighted in this article:
How To Get The Team ID, Bundle ID, and Code Requirement