Page History
...
Because macOS treats another application's data folder as private, the operating system asks the user for permission the first time TrueDEM accesses the Microsoft Teams folder. The enduser will see the following dialog:
| Info |
|---|
Known limitation: when the permission is granted (by the enduser) from the dialog, macOS 15 and later store it for the current session only. As a result, the prompt can reappear (typically after a restart of the machine/after logging out and back in/if the TrueDEM background service is restarted). This is macOS behaviour and is not specific to TrueDEM. On some macOS versions there is no dialog at all. Access is refused straight away and macOS instead shows a notification saying that TrueDEM tried to access data from another app. |
...
| Authorization | Allow |
| Code requirement | identifier "com.panagenda.TrueDEMService" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] / exists * exists */ and certificate leaf[subject.OU] = "9598MXNN88" |
| Identifier: | com.panagenda.TrueDEMService |
| Identifier type | Bundle ID |
Configuration:
...
1. Open Endpoint Manager - Devces / Configuration / Create new Policy
2. Select macOS and Settings catalog
3. Enter a name of the Policy and a Description
Description text example:
Allows the signed TrueDEMService application to access protected application data without requiring user approval.
Bundle ID: com.panagenda.TrueDEMService
Team ID: 9598MXNN88
Service: SystemPolicyAppData
...
4. Search for "Privacy Preferences Policy Control" and pick "System Policy App Data"
5. Use the settings from above and hit Save
6. Click Next and Assign it to your Users
