> ## Documentation Index
> Fetch the complete documentation index at: https://platform.atlan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Deploy with MDM

> Install and manage Atlan across company-owned Macs.

Use your mobile device management (MDM) platform to install Atlan, grant the
required macOS permission, and choose how the app updates. This workflow works
with Jamf, Kandji, Microsoft Intune, and other MDMs that support `.pkg` files
and configuration profiles.

This guide covers managed Macs running macOS 13 or later. For individual Mac
and Windows installs, see [Install the desktop app](/desktop/install).

## Before you deploy

Download these two files:

| File                     | Where to get it                                                                                  |
| ------------------------ | ------------------------------------------------------------------------------------------------ |
| macOS installer (`.pkg`) | [Atlan downloads](https://releases.atlan.com), listed as **macOS Installer (.pkg) - for IT/MDM** |
| Full Disk Access profile | `https://releases.atlan.com/desktop/stable/atlan-fda.mobileconfig`                               |

Allow the hosts in [Network requirements](/admin/desktop-deployment/network-requirements)
before installing the app.

## Deploy Atlan

1. Upload the `.pkg` to your MDM as a custom or line-of-business app.
2. Configure a silent, machine-wide install.
3. Upload the Full Disk Access profile as a custom configuration profile.
4. Assign both files to a test group. Deploy the profile before or alongside
   the app.
5. On a test Mac, open Atlan and confirm that setup shows Full Disk Access as
   granted without prompting the user.

The app installs at `/Applications/Atlan.app`. Its bundle identifier is
`com.atlan.dashboard`.

<Note>
  Use the `.pkg` for MDM deployment. The `.dmg` is for people installing the
  app themselves.
</Note>

## Choose who manages updates

By default, Atlan updates itself. You can instead deploy each new `.pkg`
through your MDM. See [Manage updates](/admin/desktop-deployment/updates) for
both options and guidance for standard user accounts.

## Verify the package

If your software policy requires package verification, run:

```sh theme={null}
pkgutil --check-signature "Atlan_<version>_universal.pkg"
spctl --assess --type install -vv "Atlan_<version>_universal.pkg"
```

Expect `source=Notarized Developer ID`. Stop the deployment if verification
fails.

## Next steps

* [Grant macOS permissions](/admin/desktop-deployment/permissions-profile)
* [Manage updates](/admin/desktop-deployment/updates)
* [Review network requirements](/admin/desktop-deployment/network-requirements)
* [Uninstall and offboard devices](/admin/desktop-deployment/uninstall)