Permissions for Mac 1.1.0

Download Permissions-for-Mac-1.1.0.dmg (macOS 14 or later, Apple Silicon and Intel, 1.4 MB)

Open the DMG, drag the app to Applications, open it. The first time, right-click the app, choose Open, then Open again. Then grant it Full Disk Access when it asks; it reads that file and never writes to it.

New in 1.1.0: for fleets

No MDM shows which apps users have granted Screen Recording, Accessibility, Full Disk Access or the microphone. The command line now does, and it was written to run from one.

• Run as root (the way an MDM agent runs), list, changes and audit read every account under /Users and tag each grant with its user. --user <name> limits it.
• Every JSON document carries host, user, when and version, so outputs from a whole fleet merge into one table.
• permsmac audit policy.json checks the Mac against a written policy: allow-lists per permission with globs like com.apple.*, an optional allow-list for things that start on their own, and a check for leftovers from removed apps. Exit 0 compliant, 1 violations, 2 could not check. permsmac audit --example prints a starter policy.
• A Jamf Pro extension attribute and a JumpCloud command are in docs/fleet.

SHA-256 of the DMG: 0367580eb488bce9cff9f4d6c08a4f54f65d1849eaa4e4e0731d59bc258add5e