https://github.com/jamf/PPPC-Utility

Privacy Preferences Policy Control (PPPC) Utility
https://github.com/jamf/PPPC-Utility

app configuration-profiles macos

Last synced: 4 days ago
JSON representation

Privacy Preferences Policy Control (PPPC) Utility

• Host: GitHub
• URL: https://github.com/jamf/PPPC-Utility
• Owner: jamf
• License: mit
• Created: 2018-09-20T20:47:47.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2024-01-29T17:18:03.000Z (9 months ago)
• Last Synced: 2024-08-02T15:25:56.258Z (3 months ago)
• Topics: app, configuration-profiles, macos
• Language: Swift
• Homepage:
• Size: 6.38 MB
• Stars: 733
• Watchers: 54
• Forks: 46
• Open Issues: 13
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • License: LICENSE

Awesome Lists containing this project

• awesome-macadmin-tools - https://github.com/jamf/PPPC-Utility

README

        
# ![PPPC Utility logo][logo] Privacy Preferences Policy Control (PPPC) Utility

[logo]: /Resources/Assets.xcassets/AppIcon.appiconset/PPPC_Logo_32%402x.png "PPPC Utility"

PPPC Utility is a macOS (10.15 and newer) application for creating configuration profiles containing the Privacy Preferences Policy Control payload for macOS. The profiles can be saved locally, signed or unsigned. Profiles can also be uploaded directly to a Jamf Pro server.

All changes to the application are tracked in [the changelog](https://github.com/jamf/PPPC-Utility/blob/master/CHANGELOG.md).

## Installation

Download the latest version from [the Releases page](https://github.com/jamf/PPPC-Utility/releases).

## Building profile

Start by adding the bundles/executables for the payload by using drag-and-drop or by selecting the add (+) button in the left corner.

![Start by adding to the **Applications** table](/Images/Building.png "Building profile")

## Saving

Profiles can be saved locally either signed or unsigned.

![Click **Save** button to save a profile](/Images/SavingUnsigned.png "Saving an unsigned  profile")

![Choose a **Signing Identity** to save a signed profile](/Images/SavingSigned.png "Saving a signed profile")

## Upload to Jamf Pro

PPPC Utility can use bearer token authentication (or basic authentication as a fallback for versions of Jamf Pro older than v10.34) to any supported

Jamf Pro version using the username and password of a Jamf Pro user account.  The user account at minimum needs the two privileges indicated below.

Jamf Pro 10.49 and higher can use OAuth client credentials to access the API.  The client ID and client secret generated by Jamf Pro in the

"API Roles and clients" settings are used during the PPPC Utility upload process.  When setting up the API Role, these are the permissions that

PPPC Utility requires to upload the profiles.

#### Required API Permissions

- "Create macOS Configuration Profiles" - primary permission to upload profiles; each upload from PPPC Utility creates a new profile.

- "Read Activation Code" - needed to retrieve the organization name that is placed in the profile.

### Jamf Pro 10.7.1 and newer

Starting in Jamf Pro 10.7.1 the Privacy Preferences Policy Control Payload can be uploaded to the API without being signed before uploading.

![In 10.7.1 or greater choosing **Signing Identity** is optional before upload](/Images/UploadUnsigned.png "Upload unsigned")

### Jamf Pro 10.7.0 and below

To upload the Privacy Preferences Policy Control Payload to Jamf Pro 10.7.0 and below, the profile will need to be signed before uploading.

![In 10.7.0 or less **Signing Identity** must be chosen before uploading](/Images/UploadSigned.png "Upload signed")

## Importing

Signed and unsigned profiles can be imported.

![Import any profile](/Images/ImportProfile.png "Import profiles")