Privacy Preferences Policy Control Payload ¶

The Privacy Preferences payload controls the settings that are displayed in the “Privacy” tab of the “Security & Privacy” pane in System Preferences.

Supervised Only:
PayloadType:	com.apple.TCC.configuration-profile-policy
	N/A
macOS:	10.14
macOS Deprecated:
	N/A
iOS:	N/A
iOS Deprecated:	N/A
Highlander:	False

Contents

Privacy Preferences Policy Control Payload
- Keys
  - Services
- Service Dictionary Keys

Keys are limited to the privacy service names listed below. Each key is an array of dictionaries describing the app or process to which access is given. In the case of conflicting specifications, the most restrictive setting (deny) will be used.

Type	Default	Required	Regex	iOS	macOS	Supervised
dictionary	N/A	always	N/A	N/A	N/A	N/A

Service Dictionary Keys ¶

Name	Type	Title	Description	Required
AddressBook	array	Contacts	Contact information managed by Contacts.app.	n/a
Calendar	array	Calendar	Calendar information managed by Calendar.app.	n/a
Reminders	array	Reminders	Reminders information managed by Reminders.app.	n/a
Photos	array	Photos	Pictures managed by Photos.app in ~/Pictures/.photoslibrary.	n/a
Camera	array	Camera	A system camera. Access to the camera cannot be given in a profile; it can only be denied.	n/a
Microphone	array	Microphone	A system microphone. Access to the microphone cannot be given in a profile; it can only be denied.	n/a
Accessibility	array	Accessibility	Control the application via the Accessibility subsystem.	n/a
PostEvent	array	PostEvent	Allows the application to use CoreGraphics APIs to send CGEvents to the system event stream.	n/a
SystemPolicyAllFiles	array	SystemPolicyAllFiles	Allows the application access to all protected files.	n/a
SystemPolicySysAdminFiles	array	SystemPolicySysAdminFiles	Allows the application access to some files used in system administration.	n/a
AppleEvents	array	AppleEvents	Allows the application to send a restricted AppleEvent to another process.	n/a

AddressBook ¶

Contacts

Contact information managed by Contacts.app.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

Calendar ¶

Calendar

Calendar information managed by Calendar.app.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

Reminders ¶

Reminders

Reminders information managed by Reminders.app.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

Photos ¶

Photos

Pictures managed by Photos.app in ~/Pictures/.photoslibrary.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

Camera ¶

Camera

A system camera. Access to the camera cannot be given in a profile; it can only be denied.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

Microphone ¶

Microphone

A system microphone. Access to the microphone cannot be given in a profile; it can only be denied.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

Accessibility ¶

Accessibility

Control the application via the Accessibility subsystem.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

PostEvent ¶

PostEvent

Allows the application to use CoreGraphics APIs to send CGEvents to the system event stream.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

SystemPolicyAllFiles ¶

SystemPolicyAllFiles

Allows the application access to all protected files.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

SystemPolicySysAdminFiles ¶

SystemPolicySysAdminFiles

Allows the application access to some files used in system administration.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A

AppleEvents ¶

AppleEvents

Allows the application to send a restricted AppleEvent to another process.

Type	Default	Required	Regex	iOS	macOS	Supervised
array	N/A	N/A	N/A	N/A	N/A	N/A