MacOS permissions configuration

[aspauldingcode]

New intel from Work (UM IT Job). MacOS permissions configurations can be configured using a example.mobileconfig which is installable as a profile in macOS manually.

If Supervised, this .mobileconfig can be installed via cli(?) potentially. This would allow me to automate the process.

T2 and M1 macs can be supervised using a second mac with AppleConfigurator2.

Otherwise, you can use a MDM tool such as micromdm or mosyle mdm buisness (free for 30 devices), jamf, etc.

Since this is a personal device, management of such a thing is a different equation. MDM is typically for many many devices to be managed, for example a business need or organization.

Creating thes profile configurations is a plaintext file. They are editable using any ide, or you can use tools such as:

• Jamf pppc utility for toggles gui permissions
• Imazing profile creator

The idea: Install rosetta 2, xcodebuild utils, and enable accessibility permissions for all window management tools and needed software config.

Then, go from there.

• automate the process
• cli config with nix and .mobileconfig file
• provision with Linux potentially?
• ability to wipe device and reinstall with profile installed.

[aspauldingcode]

Dammit. Seems like I can't just willy-nilly create a new permissions.mobileconfig. It won't install unless the config was made by an authorized MDM server.