During updates of the Addigy Agent or initial enrollment in Addigy your end users may see a PPPC popup seeking permission for the Addigy Agent, go-agent, to run on the Mac. This situation can arise when your end users running macOS 10.14+ and Addigy is being installed on their machine or the Addigy go-agent is being upgraded. Devices in the following state should see no popups if:
- Mac devices are currently enrolled in Addigy via Addigy MDM and have User Approved MDM applied (Learn more about User Approved MDM)
- Mac devices are currently enrolled in Addigy via the Apple Automated Device Enrollment, formerly known as the Device Enrollment Program
- Mac devices are enrolled in Addigy with another MDM provider AND you have deployed the latest Addigy PPPC profiles
NOTE: On macOS 10.15+, ScreenRecording CANNOT be automatically granted, which is by Apple Design.
If your 10.14+ machines do not fall into the above categories, this is what your users may experience. Some or all of these PPPC pop-ups may appear as below, depending on the theme of the macOS system:
** The above is a partial list of potential prompts your users may encounter. Your environment may experience other prompts. Addigy provides the necessary PPPC profiles for the services required by Addigy. Depending on Custom Facts and services they interact with and if users have approved their individual MDM installations in the case of User Approved MDM, additional prompts may appear. **
Addigy's MDM will automatically whitelist these prompts from occurring if the device is enrolled via the Apple Automated Device Enrollment program or has User Approved MDM.
More Information is available on Automatically allowing PPPC for Addigy when Devices Register with MDM
If you use a third-party MDM provider you can find these PPPC profiles in the following link:
Addigy Default PPPC Profiles (TCC)
Note: If the end-user clicked Don't Allow, please follow the workflow below:
You can manually workaround this per-user (not the preferred method) by checking off the tick-box in System Preferences > Security & Privacy > Full Disk Access: