Skip to main content

How to configure the macOS permission settings

A
Written by Arick Disilva
Updated over 2 weeks ago

Note that the NetApp extension (that affects both the Network and File permissions) is only supported on macOS 11 (Big Sur) and higher.

The Computer's Details screen shows what permissions are currently enabled/disabled. You can also use the API to get the computers' details. For more information, check out this article.

Revealed Agent (Version 0.1.233 and Later, Released After January 2022)

Let's get the Revealed Agent up and running on your Mac! Just follow these straightforward steps.

Step 1: Install the Revealed Agent

1. Download the Installation File: Grab the `.pkg` file. If you need to add any special settings, you might need to rename it first. You can find more details about this in the Agent Installation/Configuration Parameters (Mac) guide.

2. Start the Installation: Open the `.pkg` file. An installation window will pop up.

3. Continue to Destination Selection: Click Continue. You'll then see where the agent will be installed on your computer.

4. Proceed to Installation Type: Click Continue again. This screen shows how the software will be installed.

5. Begin the Installation: Click Install. A window will ask for your computer's username and password.

6. Enter Your Credentials: Type in your username and password, and then click Install Software. The installation will begin. Once it's done, you'll see a "The installation was successful" message.

7. Finish Up: Click Close to complete the installation.

Step 2: Granting Permissions for the Revealed Agent

After installing the agent, you need to give it permission to record screen activity and other data. Here's how:

Accessibility and Screen Recording Permissions

1. Launch the Teramind Agent: Open Launchpad and find the Teramind Agent app. Open it. You'll see a window about Accessibility Access.

2. Open System Preferences: Click the Open System Preferences button. This will take you to the Security & Privacy settings.

3. Allow Accessibility: Click the Accessibility tab and check the box next to the Teramind Agent app to allow it access.

4. Allow Screen Recording: Click the Screen Recording tab and check the box next to the Teramind Agent app to allow it access.

5. Restart (if prompted): If you're asked to restart the application, go ahead and do so.

Network Monitoring Permission

For Agent Version 0.1.234 and Newer, and macOS 11 (Big Sur) and Higher

1. Run the Command: Open Terminal and paste this exact line, then press Enter:

sudo "/usr/local/teramind/agent/bin/Teramind Agent.app/Contents/MacOS/Teramind Agent" network_permissions;sleep 1;sudo killall "Teramind Agent"

You might see a "System Extension Blocked" message.

2. Open Security Preferences: Click Open Security Preferences. This will take you back to the Security & Privacy settings.

3. Allow NetApp: Click Allow next to the message about ".NetApp" being blocked. A small window will appear.

4. Confirm: Click Allow again to let NetApp configure the network settings.

File Monitoring Permission

For Agent Version 23.35.4749 and Newer, and macOS 11 (Big Sur) and Higher

1. Run the Command: Open Terminal and paste this line, then press Enter:

sudo "/usr/local/teramind/agent/bin/Teramind Agent.app/Contents/MacOS/Teramind Agent" filemonitor_permissions;sleep 1;sudo killall "Teramind Agent"

You might see another "System Extension Blocked" message.

2. Open Security Preferences: Click Open Security Preferences again.

3. Go to Privacy: Click the Privacy tab.

4. Select Full Disk Access: From the left, choose Full Disk Access.

5. Enable FileMonitor: On the right, find FileMonitor and check the box to enable it.

Geolocation Monitoring Permission

First, make sure Location Services are turned on:

Apple menu > System Settings, click Privacy & Security in the sidebar, then click Location Services on the right (you may need to scroll down).

1. Run the Command: Open Terminal and paste this, then press Enter:

sudo "/usr/local/teramind/agent/bin/Teramind Agent.app/Contents/MacOS/Teramind Agent" geolocation_permissions;sleep 1;killall "Teramind Agent"

A box will pop up saying "Teramind Agent" would like to use your current location:

2. Click Allow: Click Allow to activate the geolocation feature.

Revealed Agent (v0.1.226 to v0.1.232, released between May to December 2022)

The Revealed Agent will prompt you to add the permissions. You don't have to use the sudo command. However, you will still have to uncheck and recheck the two permission settings from your System Preferences and restart the Agent.

Stealth Agent (macOS Sequoia)

Step 1: Install the Stealth Agent

The installation process is very similar to installing the Revealed Agent. Please refer to the instructions in the Step 1: Installing the Revealed Agent section above.

Step 2: Setting macOS Permissions for the Stealth Agent

To ensure the Stealth Agent works correctly, we need to grant it specific permissions on your Mac. Let's get started!

Accessibility and Screen Recording Permissions

1. Open the Terminal: Open the Terminal application. Then, copy and paste the following command into the Terminal window and press Enter:

sudo killall "System Monitoring"; open -n "/usr/local/teramind/agent/bin/System Monitoring.app" --args permissions

(Make sure to type the entire command in one single line)

This will open the Accessibility Access window.

2. Go to System Settings: Click the Open System Settings button. You'll be directed to the Accessibility tab in System Settings.

3. Enable Accessibility: Find "System Monitoring" in the list and click the toggle button next to it to enable accessibility. A Privacy & Security warning message will appear.

4. Confirm and Modify: Enter your Mac's password when prompted and click Modify Settings. You'll then be asked to enable Screen Recording permission.

5. Go to Screen Recording Settings: Click the Open System Settings button again. This time, you'll be taken to the Screen and System Audio Recording tab in System Settings.

6. Enable Screen and Audio Recording: Click the toggle button next to "System Monitoring" to allow screen and audio recording. You'll be prompted to restart the application.

7. Restart the Application: Click Quit & Reopen to apply the screen recording permission.

Network Monitoring Permission

1. Run the Network Permissions Command: To monitor network activity, we need to enable permission for NetApp, which is used for monitoring network traffic. Open the Terminal and copy-paste this command and press Enter:

sudo "/usr/local/teramind/agent/bin/System Monitoring.app/Contents/MacOS/System Monitoring" network_permissions;sleep 1;sudo killall "System Monitoring"

(Again, enter the whole command on one line.)

You'll see a security dialog for System Certificate Trust Settings.

2. Update Settings: Enter your password and click Update Settings. You'll then see a dialog saying, “NetApp would like to use a new network extension”.

3. Open Login Items & Extensions: Click Open System Settings. This will open the Login Items & Extensions tab in System Settings, showing a list of Network Extensions.

4. Enable NetApp Extension: Click the toggle button next to the .NetApp extension to enable it. A System Extensions dialog box will pop up.

5. Confirm System Extension: Enter your password and click OK. Another dialog will appear, saying “NetApp Would Like to Add Proxy Configurations”.

6. Allow Proxy Configuration: Click Allow to confirm adding proxy configurations by NetApp.

File Monitoring Permission

1. Run the File Monitor Command: To monitor file transfers, use this command in the Terminal:

sudo "/usr/local/teramind/agent/bin/System Monitoring.app/Contents/MacOS/System Monitoring" filemonitor_permissions;sleep 1;sudo killall "System Monitoring"

(One single line.)

You'll see a dialog: “NetApp would like to use a new endpoint security extension”.

2. Go to Endpoint Security Settings: Click Open System Settings. This will open the Login Items & Extensions tab with a list of Endpoint Security Extensions.

3. Enable NetApp Security Extension: Click the toggle next to the .NetApp extension to enable it. A System Extensions dialog box will appear.

4. Confirm Extension: Enter your password and click OK.

Geolocation Monitoring Permission

First, make sure Location Services are turned on:

Apple menu > System Settings, click Privacy & Security in the sidebar, then click Location Services on the right (you may need to scroll down).

Important: Before enabling geolocation, make sure Location Services are turned on: Go to the Apple Menu > System Settings > Privacy & Security in the sidebar, and then click Location Services on the right. (You might need to scroll down).

1. Run Geolocation Command: To monitor location data, use the following command in the Terminal:

sudo "/usr/local/teramind/agent/bin/System Monitoring.app/Contents/MacOS/System Monitoring" geolocation_permissions;sleep 1;killall "System Monitoring"

(All in one line.)

2. Allow Location Access: You will see a dialog box saying, “System Monitoring would like to use your current location”.

3. Activate Geolocation: Click OK. Geolocation will be activated.

4. Confirm Activation: You can find the System Monitoring extension in System Settings > Privacy & Security > Location Services.

Stealth Agent (v0.1.233 and later, released after January 2022)

Let's get your Stealth Agent installed and configured! These steps are similar to setting up the Revealed Agent.

Step 1: Install the Stealth Agent

Please follow the instructions for installing the Revealed Agent, which you can find here: Step 1: Installing the Revealed Agent.

Step 2: Configure macOS Permissions for the Stealth Agent

We need to grant the Stealth Agent some permissions so it can work correctly. We'll cover Accessibility, Screen Recording, Network Monitoring, File Monitoring, and Geolocation.

Accessibility and Screen Recording Permissions

1. Open Terminal and Run Command: Open the Terminal app on your Mac and copy and paste the following command, then press Enter:

sudo killall "System Monitoring"; open -n "/usr/local/teramind/agent/bin/System Monitoring.app" --args permissions

(Make sure to type or paste the whole thing on one line!)

2. System Preferences: You'll see an Accessibility Access window. Click the Open System Preferences button. This will take you to the Security & Privacy window.

mceclip14.png

3. Enable Accessibility: In Security & Privacy, go to the Accessibility tab. Find and click on System Monitoring in the list and check the box to enable accessibility permission. You might see a warning message, don't worry, it's normal!

4. Open System Preferences Again: Click Open System Preferences again when prompted.

5. Enable Screen Recording: This time, you'll be asked to give System Monitoring permission for Screen Recording.

6. Restart the Application: Click Quit & Reopen to apply the screen recording permission.

Network Monitoring Permission

For Agent Version 0.1.234 and Newer, and macOS 11 (Big Sur) or higher

1. Run Command in Terminal: To monitor network activities, we need to give permission to NetApp, which Teramind uses. Copy and paste this command into your Terminal and press Enter:

sudo "/usr/local/teramind/agent/bin/System Monitoring.app/Contents/MacOS/System Monitoring" network_permissions;sleep 1;sudo killall "System Monitoring"

(Again, make sure it's all on one line!)

2. System Extension Blocked: You might see a System Extension Blocked message.

3. Allow in Security Preferences: Click Open Security Preferences. Then, click the Allow button next to the message about System software from application ".NetApp" was blocked from loading.

4. Confirm Proxy Configuration: Click Allow to confirm adding proxy configurations by NetApp.

File Monitoring Permission

For Agent Version 23.35.4749 and Newer, and macOS 11 (Big Sur) or higher

1. Run Command in Terminal: To monitor file transfers, run this command in Terminal:

sudo "/usr/local/teramind/agent/bin/System Monitoring.app/Contents/MacOS/System Monitoring" filemonitor_permissions;sleep 1;sudo killall "System Monitoring"

(One line, as always!)

2. Open Security Preferences: You'll see a NetApp permission request. Click Open Security Preferences.

3. Privacy Tab: Go to the Privacy tab.

4. Full Disk Access: Select Full Disk Access from the left panel.

5. Enable FileMonitor: Enable FileMonitor from the list on the right.

Geolocation Monitoring Permission

First, make sure Location Services are turned on:

Apple menu > System Settings, click Privacy & Security in the sidebar, then click Location Services on the right (you may need to scroll down).

1. Run Command in Terminal: For geolocation data, use this command:

sudo "/usr/local/teramind/agent/bin/System Monitoring.app/Contents/MacOS/System Monitoring" geolocation_permissions;sleep 1;killall "System Monitoring"

2. Allow Location Access: You’ll get a message saying “System Monitoring” would like to use your current location.

3. Click Allow: Simply click the Allow button to activate geolocation.

Stealth Agent (v0.1.226 to v0.1.232, released between May to December 2022)

To ensure the Teramind Mac Agent works smoothly, it needs two essential permissions: Accessibility and Screen Recording. These permissions allow the agent to capture information like website visits, keystrokes, screen snapshots, and recordings.

Let's set these up together. Follow these steps:

1. Open Search: Click the Search icon (magnifying glass) on your Mac's menu bar.

2. Open Terminal: Type "terminal" in the search box. Select Terminal from the results and press Enter to open it. The Terminal is a tool where you can type commands to interact with your Mac.

3. Run the Command: In the Terminal window, carefully type or copy and paste the following command, then press Enter:

sudo killall "System Monitoring"; open -n "/usr/local/teramind/agent/bin/System Monitoring.app" --args permissions

This command will trigger the Accessibility Access window to pop up.

4. Open System Preferences: In the Accessibility Access window, click the Open System Preferences button. This will take you to your Mac's Security & Privacy settings.

5. Unlock Settings: In the Security & Privacy window, click the Lock icon at the bottom. You might be asked to enter your Mac's password. This unlocks the settings so you can make changes.

6. Select Accessibility: On the left side panel, click on Accessibility.

7. Grant Accessibility Permission: Find System Monitoring in the list and click the checkbox next to it to grant the accessibility permission. Keep this window open; we'll need it again.

8. Select Screen Recording: Scroll up or down on the left panel and select Screen Recording.

9. Grant Screen Recording Permission: Again, find System Monitoring and click the checkbox next to it to grant the screen recording permission. A pop-up window will appear.

10. Restart the Agent: Click Quit & Reopen when you see the message: "“System Monitoring” will be able to record the contents of your screen until it is quit." This restarts the Teramind Agent, and it should now function correctly with the necessary permissions.

Mac Agent v0.1.204 and earlier, released prior to May 2020

If you're using Mac Agent version 0.1.204 or earlier (released before May 2020), you'll need to grant it special permissions to work correctly. These permissions help Teramind track activities like website visits, keystrokes, and screen recordings.

Let's get these set up! Follow these simple steps:

1. Open the Search: Click the Search icon (magnifying glass) in your Mac menu bar.

2. Open the Terminal: Type "terminal" and select the Terminal app. Press Enter to open it.

3. Enter the Correct Command:

  • For the Stealth Agent: Type this command in the Terminal window and press Enter:

    `sudo killall tmagent; open /usr/local/teramind/agent/bin/tmagent.app --args permissions`
  • For the Revealed Agent: Type this command in the Terminal window and press Enter:

    `sudo killall tmui; open '/usr/local/teramind/agent/bin/Teramind Agent.app' --args permissions`

    This will make the Accessibility Access window pop up!

4. Open System Preferences: In the Accessibility Access window, click the Open System Preferences button. This will take you to your Mac's Security & Privacy settings.

5. Unlock Security Settings: In the Security & Privacy window, click the Lock icon at the bottom. You'll need to enter your password to make changes.

6. Open Accessibility: Click Accessibility in the left panel.

7. Grant Accessibility Permission: Find Teramind Agent in the list and click the checkmark next to it. This allows Teramind to access your computer's accessibility features. Don't close this window just yet!

8. Open Screen Recording: Still in the Security & Privacy window, look for Screen Recording in the left panel and select it.

9. Grant Screen Recording Permission: Again, find Teramind Agent and click the checkmark next to it. This lets Teramind record your screen. A pop-up window will appear.

10. Restart the Agent: When you see the message, "“tmagent” will not be able to record the contents of your screen until it is quit", click the Quit Now button. This will restart the Teramind Agent with the new permissions.

That's it! Your Teramind Agent should now be set up and working correctly.

Did this answer your question?