When you enroll a computer with Jamf Pro, the computer automatically becomes managed by Jamf Pro. This allows you to perform remote management tasks on the computer. To perform some tasks on computers with macOS 10.14 or later, you must allow the Jamf management framework to access the target computer's system files and processes by installing the Privacy Preferences Policy Control profile.
The Privacy Preferences Policy Control profile is part of a security feature introduced in macOS 10.14.For more information about the Privacy Preferences Policy Control profile, see Privacy Preferences Policy Control MDM payload settings for Apple devices in Apple Platform Deployment.
This option is enabled by default and allows Jamf Pro to automatically install the Privacy Preferences Policy Control profile on computers with macOS 10.14 or later that have a User Approved MDM status. This grants Full Disk Access to the Jamf management framework, allowing it to access the necessary system files and processes for managing computers and performing remote management tasks.
The Enable certificate-based authentication and Enable push notifications settings must be enabled to access this feature.
For more information about the contents of the Privacy Preferences Policy Control profile, see the "Privacy Preferences Policy Control Profile Contents" section of the Preparing your Organization for User Data Protections on macOS 10.14 article.