I’m trying to push a PPPC profile through our mdm to allow staff to grant the screen recording permission to Zoom and Webex. The profile generated by our mdm, as well as an identical one created using Jamf’s PPPC Utility, install to the device properly, but do not seem to actually apply any settings to my test device running macOS 11.4. Any help would be greatly appreciated.
The following is our profile.
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDescription</key>
<string>ScreenRecordingTest</string>
<key>PayloadDisplayName</key>
<string>ScreenRecordingTest</string>
<key>PayloadIdentifier</key>
<string>608D5F4C-B2F4-49BF-BA36-46FDA7FDD321</string>
<key>PayloadOrganization</key>
<string>com</string>
<key>PayloadType</key>
<string>com.apple.TCC.configuration-profile-policy</string>
<key>PayloadUUID</key>
<string>BE3DADCB-1DA1-4378-99D7-46CBDEF361D1</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>Services</key>
<dict>
<key>AppleEvents</key>
<array>
<dict>
<key>AEReceiverCodeRequirement</key>
<string>identifier "us.zoom.xos" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = BJ4HAAB9B3</string>
<key>AEReceiverIdentifier</key>
<string>us.zoom.xos</string>
<key>AEReceiverIdentifierType</key>
<string>bundleID</string>
<key>Authorization</key>
<string>Allow</string>
<key>CodeRequirement</key>
<string>identifier "us.zoom.xos" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = BJ4HAAB9B3</string>
<key>Comment</key>
<string></string>
<key>Identifier</key>
<string>us.zoom.xos</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
<dict>
<key>AEReceiverCodeRequirement</key>
<string>identifier "com.cisco.webexmeetingsapp" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = DE8Y96K9QP</string>
<key>AEReceiverIdentifier</key>
<string>com.cisco.webexmeetingsapp</string>
<key>AEReceiverIdentifierType</key>
<string>bundleID</string>
<key>Authorization</key>
<string>Allow</string>
<key>CodeRequirement</key>
<string>identifier "com.cisco.webexmeetingsapp" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = DE8Y96K9QP</string>
<key>Comment</key>
<string></string>
<key>Identifier</key>
<string>com.cisco.webexmeetingsapp</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
</array>
<key>ScreenCapture</key>
<array>
<dict>
<key>Authorization</key>
<string>AllowStandardUserToSetSystemService</string>
<key>CodeRequirement</key>
<string>identifier "us.zoom.xos" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = BJ4HAAB9B3</string>
<key>Comment</key>
<string></string>
<key>Identifier</key>
<string>us.zoom.xos</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
<dict>
<key>Authorization</key>
<string>AllowStandardUserToSetSystemService</string>
<key>CodeRequirement</key>
<string>identifier "com.cisco.webexmeetingsapp" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = DE8Y96K9QP</string>
<key>Comment</key>
<string></string>
<key>Identifier</key>
<string>com.cisco.webexmeetingsapp</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
</array>
</dict>
</dict>
</array>
<key>PayloadDescription</key>
<string>ScreenRecordingTest</string>
<key>PayloadDisplayName</key>
<string>ScreenRecordingTest</string>
<key>PayloadIdentifier</key>
<string>608D5F4C-B2F4-49BF-BA36-46FDA7FDD321</string>
<key>PayloadOrganization</key>
<string>com</string>
<key>PayloadScope</key>
<string>System</string>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>E0F2EB42-88E7-4B91-A0B1-AE036E790E15</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
