When using a Mac Actor, some Job Actions will not run if the backend_service doesn't have full disk access.
The following example shows the output when a user attempts to make a custom modification to the crontab and it fails with the following permission error:
WM-C02X10NSHTD6:~ svcveromac$ /Users/svcveromac/verodin/remove_crontab.sh
crontab: tmp/tmp.583: Operation not permittedIn this case, full disk access is required to run Host CLI Actions successfully.
To enable full disk access
- Go to System Preferences from the Apple menu.
- Select the Security & Privacy control panel.
- Click the Privacy tab.
- From the left-side menu, select Full Disk Access.
- Click the lock icon in the lower left corner of the Preference panel and authenticate with an admin-level login.
- Click the + button to add an application with full disk access.
- Navigate to the /Applications/Utilities/ folder and select verodin_backend