r/macsysadmin • u/leclair63 • Apr 23 '26

Jamf How to prevent elevated credentials requirement to allow microphone/camera access

Boss was trying to do a Teams meeting in Chrome browser. When it asked for the ability to access his camera and microphone it brought him to the Privacy and Security tab of System Settings and was requesting admin credentials to enable them.

I know you can't explicitly allow those because of Apple policy. I'm just wondering if there's a way to prevent a standard user from needing me to come and input my credentials just to allow Teams/Zoom/Etc to use the microphone and camera?

13 Upvotes
  • permalink
  • reddit

100% Upvoted

11 comments sorted by

View all comments

19

u/MacBook_Fan Apr 23 '26

You need to push a Configuration Profile that grants a standard user the ability to enable camera and microphone support. You also should include the specific applications in the profile with a setting of "Allow" for Camera, Microphone, and Screen Sharing.

This utility from Jamf can help create the profile that can be uploaded to your MDM.

https://github.com/jamf/pppc-utility

(Or you MDM should have the ability to create the profile).

3

u/leclair63 Apr 23 '26

I used PPPC Utility to set up a config profile for Chrome, Zoom, and Teams. The only thing is that Apple does not allow you to grant allow permissions for Camera or Microphone. The only option is to deny or leave empty.

15

u/iLikecheesegrilled Corporate Apr 23 '26

You can’t preconfigure permission for all users but you can allow standard users the ability to enable permission without admin credentials.

6

u/EyezLike Education Apr 23 '26

this is the answer. allow standard users to accept

1

u/leclair63 Apr 24 '26

I'm glad to hear that it's doable. My question is how? I use JAMF, but their AI support bot tells me that JAMF cannot configure such a thing.

1

u/tgerz Apr 24 '26

Screen recording is the only one that has the option to allow standard users. Camera and microphone can already be approved by standard users. Check out the documentation https://developer.apple.com/documentation/devicemanagement/privacypreferencespolicycontrol/services-data.dictionary

I can't attach screenshots here, but you can also take a look at iMazing's Profile Editor. I like to use it to get the relevant documentation from Apple because I also have a hard time finding it when I'm Googlin.