Pre-Approval of Apple Events

Technical Articles
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

Jamf Pro administrators using AppleScript workflows prompting user interaction may need to approve the Jamf management framework to communicate with built-in applications and services using the Apple Events service within the Privacy Preferences Policy Control payload. To leverage the restricted Apple Events service, Jamf Pro administrators must provide the identifier type and code requirement for both the sending and receiving application.

Common built-in services and apps receiving restricted Apple Events needed for user interaction include the following:
System Events:
  • Receiver Identifier: com.apple.systemevents
  • Receiver Identifier Type: Bundle ID
  • Receiver Code Requirement: identifier "com.apple.systemevents" and anchor apple
SystemUIServer:
  • Receiver Identifier: com.apple.systemuiserver
  • Receiver Identifier Type: Bundle ID
  • Receiver Code Requirement: identifier "com.apple.systemuiserver" and anchor apple
Finder:
  • Receiver Identifier: com.apple.finder
  • Receiver Identifier Type: Bundle ID
  • Receiver Code Requirement: identifier "com.apple.finder" and anchor apple

A pre-built configuration profile to approve interaction between the Jamf management framework and these three Apple services can be downloaded from the following Jamf's GitHub repository: https://github.com/jamf/JamfPrivacyPreferencePolicyControlProfiles. Upload the configuration profile in Jamf Pro 10.7.1 or later.

Note:

You can upload this profile to Jamf Pro unsigned, and it will automatically generate the Payload UUID values.

In addition, an open source app built by Jamf for the Apple community can help with the identification requirements needed to allow apps to function within the Privacy Preferences Policy Control framework. This app is also available on Jamf's GitHub repository: https://github.com/jamf/PPPC-Utility.

Note:

You can upload an unsigned Privacy Preference Policy Control payload to Jamf Pro using the API.