PPPC Configuration Profile Deployment
In order for IBM Data Shift to function properly, it requires Full Disk Access permissions, along with access to the Documents, Desktop, and Downloads folders. The best way to grant these permissions is by using a Privacy Preferences Policy Control (PPPC) payload deployed through a configuration profile.
Specifically, the app needs access to the following permissions:
- SystemPolicyDesktopFolder
- SystemPolicyDocumentsFolder
- SystemPolicyDownloadsFolder
- SystemPolicyAllFiles
Below is an example:
The Code Requirement field varies based on the certificate used to sign the app. To obtain this value, run codesign -dr - /path/to/Application.app on your version of IBM Data Shift and copy everything after designated =>
Additional resources: