fulldiskaccess.mobileconfig not working properly

[JohanLeirnes]

It looks like even thou the profile is pushed to the user the system extension is not allowed Full Disk Access.

This is the latest download and pushed through intune as described in the microsoft docs.

[maximvelichko]

@bhaap, from my experience macOS does not usually properly show full disk access granted via MDM. What you see in UI is most probably what is granted manually via UI.

You can read /Library/Application Support/com.apple.TCC/MDMOverrides.plist to get what was applied through MDM.