macOS 27 Privacy Controls Require User-Channel MDM Enrollment
Summary
Several macOS 27 privacy and management features require user-channel MDM. Admins should audit whether users are MDM-enabled; re-enrollment may help individual Macs, while fleet-wide gaps may require Apple’s assistance.
Key points
- macOS 27 adds user-channel-dependent capabilities, including AppleCare diagnostic-log requests, recommended app and website camera or microphone permissions, and Safari extension management.
- Users retain consent and can override IT’s recommended app-permission settings.
- Some managed Macs may lack an MDM-enabled primary user, depending on enrollment or login setup.
- Admins can audit whether users are MDM-enabled through their management console, if it exposes that status.
- Re-enrolling a Mac can enable the user channel, but requires end-user action; the article says large-scale gaps may need Apple’s help.
Article Details
- Event Type
- macOS 27 device-management and privacy capability changes
- Impact
- Several new privacy and management capabilities require user-channel MDM enrollment, including user-consented AppleCare diagnostic-log requests and recommended app or website permissions. Managed Macs whose primary users are not MDM-enabled cannot use these capabilities. The article says this may affect a significant share of fleets, potentially in the high double digits, and that remediation at scale requires action from Apple.
People
Vendors
AppleApple's newest privacy controls in macOS 27 only work if your users are MDM-enabled, and only once they've actually shipped in your device management platform.IruSkipping account creation in Setup Assistant, common when using tools like Iru Passport that handle login-window authentication separately → the user is often not MDM-enabled.
Products
Iru PassportSkipping account creation in Setup Assistant, common when using tools like Iru Passport that handle login-window authentication separately → the user is often not MDM-enabled.macOS 27 Golden GateApple's newest privacy controls in macOS 27 only work if your users are MDM-enabled, and only once they've actually shipped in your device management platform.SafariWebsite camera and microphone permissions in Safari.