Configure Mac Permissions using MDM to Control a Remote Mac Device

In enterprise environments, manually configuring permissions on every Mac device may not be practical because:

• Users may not have administrator privileges.

• Permission approval may require administrator credentials.

• Large-scale deployments require centralised management.

To simplify deployment and permission management, organizations can use an MDM (Mobile Device Management) solution.

For configuring permission on a single device, refer to Configuring Mac Permissions to Access and Control a Remote Device.

Configure Permission via MDM for Remote Support Sessions    

To configure Accessibility permission for devices initiating remote support sessions:

1. Execute this script on the Mac devices enrolled with MDM software.

2. Deploy this PPPC configuration file to those devices using the MDM solution.

3. Zoho Assist will automatically be added to the Accessibility pane.

Configure Permissions via MDM for Unattended Access Bulk Deployment  

To configure permissions while deploying the Unattended Access installer:

1. Navigate to Unattended Access > Deployment > Deployment Link and copy the deployment link.

2. Replace the Deployment link in this script with the copied deployment link.

3. Run this script on the enrolled Mac devices that you want to configure for Unattended Access.

4. Deploy this PPPC configuration file to those devices using your MDM solution to enable the Accessibility permission for Zoho Assist.

Configure Permissions Using PPPC    

Organizations managing Mac devices with an MDM solution can deploy PPPC (Privacy Preferences Policy Control) profiles to simplify privacy permission management for Zoho Assist.

PPPC profiles allow administrators to preconfigure specific macOS privacy permissions for applications distributed through MDM, reducing the need for manual setup on individual devices.

Accessibility Permission 

Accessibility permission can be automatically configured using PPPC profiles. Users are not required to enable the permission during remote sessions manually.

Screen Recording Permission 

Screen Recording permission cannot be fully configured using PPPC profiles due to Apple privacy restrictions.

Users must manually enable the permission from Privacy & Security > Screen Recording

However, unlike manual configuration without MDM, Screen Recording permission can typically be granted using standard user privileges instead of administrator credentials.

Deploy PPPC Profiles Using MDM

Use your MDM solution to deploy the Zoho Assist PPPC mobile configuration profile to managed macOS devices. This helps reduce manual permission setup during installation and unattended access deployment.

Steps to deploy the PPPC profile using MDM

In ManageEngine MDM

1. Go to Mobile Device Management > Management.

2. Select Profiles > + Create Profile > macOS.

3. Enter the profile name and description, then click Continue.

4. Select Custom Configuration and upload this mobile configuration file

5. Save and publish the profile.

In Intune

1. Go to Devices > macOS.

2. Select Create profile.

3. Choose Templates, then select Custom.

4. Upload this PPPC mobileconfig configuration file.

5. Review the settings, save the profile, and deploy it to the required devices.

Privacy Indicator on macOS 

On recent macOS versions, Apple displays a purple privacy indicator in the control centre whenever screen content or system audio is being recorded.

This is a native macOS privacy feature and is not specific to Zoho Assist.

• During active remote sessions, the purple indicator appears automatically.

• End users can stop screen sharing anytime by clicking Purple Indicator > Stop Sharing