{"id":15608968,"url":"https://github.com/kenchan0130/tcc-permitter","last_synced_at":"2025-10-05T14:40:31.490Z","repository":{"id":51262628,"uuid":"317875407","full_name":"kenchan0130/TCC-Permitter","owner":"kenchan0130","description":"Allow services that are denied in the TCC database.","archived":false,"fork":false,"pushed_at":"2021-05-18T15:42:31.000Z","size":62,"stargazers_count":11,"open_issues_count":0,"forks_count":4,"subscribers_count":4,"default_branch":"dev","last_synced_at":"2024-05-01T20:57:44.621Z","etag":null,"topics":["jamf","jamf-pro","macadmins","macos","shell","zsh"],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/kenchan0130.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-12-02T13:45:20.000Z","updated_at":"2023-12-30T17:34:06.000Z","dependencies_parsed_at":"2022-09-04T05:23:17.150Z","dependency_job_id":null,"html_url":"https://github.com/kenchan0130/TCC-Permitter","commit_stats":null,"previous_names":[],"tags_count":4,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kenchan0130%2FTCC-Permitter","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kenchan0130%2FTCC-Permitter/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kenchan0130%2FTCC-Permitter/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/kenchan0130%2FTCC-Permitter/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/kenchan0130","download_url":"https://codeload.github.com/kenchan0130/TCC-Permitter/tar.gz/refs/heads/dev","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":251309837,"owners_count":21568913,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["jamf","jamf-pro","macadmins","macos","shell","zsh"],"created_at":"2024-10-03T05:40:39.181Z","updated_at":"2025-10-05T14:40:31.376Z","avatar_url":"https://github.com/kenchan0130.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# TCC Permitter\n\nAllow services that are denied in the TCC database.\n\n## Background\n\nFor devices under management, there are some User Consent items that cannot be allowed even with PPPC.\n\nIf you have not granted administrators, the end user cannot change the access rights of some applications in the [System Preferences] \u003e [Security \u0026 Privacy] \u003e [Privacy] UI.\n\nTherefore, I have created a script to force the User Consent item to be allowed.\n\n## Requirements\n\n* Full disk access\n  * This script reads TCC database\n* macOS 10.14 Mojave or later\n\n## How to use\n\n### With command line\n\nThe script will require two arguments.\n\n```sh\n./TCC-Permitter.sh \u003cbundle-id or binary path\u003e \u003cTCC service name\u003e\n```\n\nIf you want to allow camera of zoom app, you should run the following command:\n\n```sh\n./TCC-Permitter.sh \"us.zoom.xos\" \"Camera\"\n```\n\n### With Jamf Pro\n\n1. Upload this script to Jamf Pro.\n1. Create new policy with the script.\n1. Set arguments for the script.\n    1. Bundle ID or Binary path\n    1. TCC service name\n\nIf you want to allow camera of zoom app, the setting will look like the image below.\n\n![Jamf Pro policy example](images/jamf-pro-policy-example.png?raw=true)\n\n### Parameters\n\n#### Bundle ID or Binary path\n\nIf you want to get the bundle ID of the target application, the following command may be of help.\n\n```sh\nmdls -name kMDItemCFBundleIdentifier -r /Applications/zoom.us.app\n```\n\nAnd if you want to check the current status of the TCC database, the following command may be of help.\n\n```sh\nsqlite3 -header \"$HOME/Library/Application Support/com.apple.TCC/TCC.db\" \"SELECT service, client, allowed FROM access\"\n```\n\n#### TCC service name\n\nYou can specify one of the following list\nIt is case-insensitive.\n\nIf you want to specify more than one, you can use comma-separated values like:\n\n```sh\n./TCC-Permitter.sh \"us.zoom.xos\" \"Camera,Microphone,ScreenCapture\"\n```\n\n* Accessibility\n* AddressBook\n* All\n* AppleEvents\n* BluetoothAlways\n* BluetoothPeripheral\n* BluetoothWhileInUse\n* Calendar\n* Calls\n* Camera\n* ContactsFull\n* ContactsLimited\n* DeveloperTool\n* FaceID\n* Facebook\n* FileProviderDomain\n* FileProviderPresence\n* KeyboardNetwork\n* LinkedIn\n* ListenEvent\n* Liverpool\n* Location\n  * Gone by 11.0\n* MSO\n* MediaLibrary\n* Microphone\n* Motion\n* Photos\n* PhotosAdd\n* PostEvent\n* Reminders\n* ScreenCapture\n* SensorKitAmbientLightSensor\n* SensorKitDeviceUsage\n* SensorKitElevation\n* SensorKitForegroundAppCategory\n* SensorKitKeyboardMetrics\n* SensorKitLocationMetrics\n* SensorKitMessageUsage\n* SensorKitMotion\n* SensorKitMotionHeartRate\n* SensorKitOdometer\n* SensorKitPedometer\n* SensorKitPhoneUsage\n* SensorKitSpeechMetrics\n* SensorKitStrideCalibration\n* SensorKitWatchAmbientLightSensor\n* SensorKitWatchFallStats\n* SensorKitWatchForegroundAppCategory\n* SensorKitWatchHeartRate\n* SensorKitWatchMotion\n* SensorKitWatchOnWristState\n* SensorKitWatchPedometer\n* SensorKitWatchSpeechMetrics\n* ShareKit\n* SinaWeibo\n* Siri\n* SpeechRecognition\n* SystemPolicyAllFiles\n* SystemPolicyDesktopFolder\n* SystemPolicyDeveloperFiles\n* SystemPolicyDocumentsFolder\n* SystemPolicyDownloadsFolder\n* SystemPolicyNetworkVolumes\n* SystemPolicyRemovableVolumes\n* SystemPolicySysAdminFiles\n* TencentWeibo\n* Twitter\n* Ubiquity\n* Willow\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkenchan0130%2Ftcc-permitter","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fkenchan0130%2Ftcc-permitter","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fkenchan0130%2Ftcc-permitter/lists"}