Configuring Timus Connect Permissions on macOS Using Addigy

Overview

Timus Connect requires certain macOS permissions to support its functionality, including productivity monitoring.

Since Apple applies strict security and privacy controls, these permissions must be configured before the relevant features can work correctly.

For company-managed Macs, administrators can use Addigy to deploy configuration profiles and simplify this process.

Step 1: Verify Device Management

Before configuring permissions:

  1. Sign in to your Addigy dashboard.
  2. Confirm that the Mac is enrolled in Addigy MDM.
  3. Verify that the device has User-Approved MDM enrollment.
  4. Ensure that Timus Connect is installed or ready for deployment.

Important: Installing Timus Connect through Addigy does not automatically grant every macOS permission.

Step 2: Identify Timus Connect

Addigy requires the application's Bundle Identifier and Code Requirement to configure privacy permissions.

On a Mac with Timus Connect installed:

  1. Open Terminal.
  2. Run the following commands, replacing the application path if necessary.

Bundle Identifier:

codesign -dv "/Applications/Timus Connect.app" 2>&1

Code Requirement:

codesign -dr - "/Applications/Timus Connect.app" 2>&1
  1. Copy the values returned by the commands.
  2. Confirm whether any additional Timus helper processes require permissions.

Step 3: Create a Privacy Permissions Profile in Addigy

  1. Open the Addigy dashboard.
  2. Navigate to Catalog → Device Settings.
  3. Click New.
  4. Select Privacy Preferences Policy Control (PPPC).
  5. Name the profile Timus Connect - macOS Permissions.
  6. Enter the verified Bundle Identifier and Code Requirement for Timus Connect.

Step 4: Configure Full Disk Access

  1. Within the PPPC profile, locate Access to All Protected and System Administration Files.
  2. Select Add New.
  3. Enter the appropriate Timus Connect identifier and Code Requirement.
  4. Set the permission to Allow.
  5. Save the configuration.

Full Disk Access can be granted through an appropriately configured MDM profile without requiring each user to approve it manually.

Step 5: Configure Screen Recording Permission

Screen Recording is handled differently by macOS.

  1. Within the PPPC profile, locate Ability to Screen Capture.
  2. Select Add New.
  3. Enter the appropriate Timus Connect identifier and Code Requirement.
  4. Set the permission to Let Standard Users Approve.
  5. Save the configuration.

Important: macOS does not allow MDM solutions to silently approve Screen Recording permission.

However, Addigy can allow standard users to grant this permission without administrator credentials.

Step 6: Deploy the Configuration

  1. Save the PPPC profile.
  2. Assign it to the appropriate Addigy policy.
  3. Deploy the policy to a test Mac.
  4. Confirm that the device receives the configuration profile.
  5. Verify the required permissions before deploying to additional devices.

Ideally, deploy the PPPC profile before installing or launching Timus Connect.

Step 7: Complete User Approval

If Screen Recording permission is required and has not yet been approved:

  1. Open System Settings on the Mac.
  2. Navigate to Privacy & Security.
  3. Select Screen & System Audio Recording (or Screen Recording, depending on macOS version).
  4. Locate Timus Connect.
  5. Enable the permission.
  6. Restart Timus Connect if prompted.

Once permission is granted, the relevant functionality can be tested again.

Step 8: Verify Productivity Data

After configuring permissions:

  1. Launch Timus Connect.
  2. Confirm that the required macOS permissions are active.
  3. Connect or sign in to Timus Connect.
  4. Check whether productivity information begins appearing in Timus Manager, if the feature is enabled.
  5. If data is still missing, review the assigned permissions and configuration.

Troubleshooting

If permissions are not working as expected:

  • Confirm that the Addigy PPPC profile was successfully installed.
  • Verify that the Bundle Identifier and Code Requirement match the installed Timus Connect version.
  • Check whether any additional helper processes require permissions.
  • Ensure there are no conflicting PPPC profiles.
  • Confirm that Screen Recording was approved by the user.
  • Restart Timus Connect and test again.

Important Notes

Full Disk Access: Can be centrally approved through Addigy MDM using a correctly configured PPPC profile.

Screen Recording: Cannot be silently enabled through Addigy. macOS requires user approval.

Productivity Tracking: The required permissions must be granted for features that depend on them to function correctly.

User Transparency: Organizations should explain the purpose of productivity monitoring and follow applicable employee-notification, privacy, and consent requirements.

References

Timus Networks — Enabling Timus Connect Access on macOS Devices with Privilege Manager Enabled

https://support.timusnetworks.com/hc/en-us/articles/31613705017619-Timus-Networks-Enabling-Timus-Connect-Access-on-macOS-Devices-with-Privilege-Manager-Enabled

Addigy — How to Create and Deploy a PPPC Payload

https://support.addigy.com/hc/en-us/articles/4403542443155-How-to-Create-and-Deploy-a-PPPC-Payload

Addigy — Privacy Preferences Policy Control for Standard Users

https://support.addigy.com/hc/en-us/articles/4403549601043-Privacy-Preferences-Policy-Control-PPPC-for-Standard-Users

Updated

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request

Comments

0 comments

Please sign in to leave a comment.