MDM vs. RMM: Managing macOS Devices and Permissions

Summary
An overview of macOS MDM and RMM, comparing software deployment, device visibility, remote access, and costs. MDM can deploy PPPC profiles to manage TCC permissions, while RMM generally requires endpoint approval for permissions.
Key points
- MDM can deploy software and PPPC profiles to manage macOS TCC permissions, including granting an application Full Disk Access.
- The article says MDM software and PPPC profiles can be installed silently, avoiding end-user interaction for those deployments.
- MDM supports centralized policies and inventory across device groups; Apple Business Manager can help organizations establish device ownership.
- RMM offers remote access and host performance monitoring, but the article says it typically has weaker inventory management and requires explicit endpoint approval for permissions.
- The author recommends considering both MDM and RMM, while noting MDM may cost two to three times more per endpoint than RMM.
Article Details
- Topic
- Comparison of MDM and RMM approaches for managing macOS devices
Vendors
Addigythat excel in the business of Apple management—names you may have heard of are companies like Jamf, Addigy, Kandji and many others.Applecase, "mobile," within the macOS ecosystem, refers to laptops like MacBooks, iPads and iPhones, and even Apple TVs. There are several companies that excel in the business of Apple management—names you may have heardHuntressthat you can deploy policies, via PPPC payloads, to alter permissions to this database. When using the Huntress agent on macOS, it is recommended to grant the application full disk access. When a PPPC payload isJamfcompanies that excel in the business of Apple management—names you may have heard of are companies like Jamf, Addigy, Kandji and many others.
Products
Apple Business Manageryour org, keep an updated inventory and plenty of other reasons. On top of this, Apple released Apple Business Manager (ABM). This is Apple’s own MDM software. Using ABM is beneficial to layering your MDM, as thisJamf ProAn MDM like Jamf Pro is currently the industry standard, and administrators can build themselves homepages that give them all of the most pertinent information they desire.macOSHomeBlogThe Battle for macOS Management: MDM vs.