> ## Documentation Index
> Fetch the complete documentation index at: https://platform.atlan.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Grant macOS permissions

> Pre-approve Full Disk Access for Atlan on managed Macs.

Atlan needs Full Disk Access to find and sync skill files anywhere in a user's
home folder. Deploy Atlan's configuration profile through your MDM so people
do not need to grant the permission themselves.

## Deploy the profile

1. Download the profile:

   ```txt theme={null}
   https://releases.atlan.com/desktop/stable/atlan-fda.mobileconfig
   ```

2. Upload it to your MDM as a custom configuration profile.

3. Assign it to the same devices as the Atlan app.

4. Deploy the profile before or alongside the app.

The stable URL always serves the profile for the current release. If you pin
artifacts by version, use the versioned file named
`atlan-fda-v<version>.mobileconfig` from the same release.

## Profile details

| Property         | Value                    | Meaning                                    |
| ---------------- | ------------------------ | ------------------------------------------ |
| Service          | `SystemPolicyAllFiles`   | Full Disk Access                           |
| Identifier       | `com.atlan.dashboard`    | Matched by bundle ID                       |
| Code requirement | Atlan's signing identity | Grants access only to the signed Atlan app |
| `StaticCode`     | `false`                  | Keeps the grant valid after app updates    |
| Removal          | Disallowed               | Users cannot remove the profile            |

Use the profile as downloaded. Editing its code requirement can prevent macOS
from granting the permission.

## Verify

On a test device with the profile installed:

```sh theme={null}
profiles show -type configuration | grep -A 3 "Atlan"
```

Then install and open Atlan. Setup should show Full Disk Access as already
granted without prompting the user.

## Without the profile

Without an MDM profile, Atlan guides each user to grant Full Disk Access in
System Settings on first launch. Manually installing the profile does not
pre-approve the permission; macOS accepts pre-approval only from an MDM.
