Keep the macOS Remote Help screen-sharing consent step explicit

Source facts

For the macOS Remote Help native client, MDM can allow Accessibility on the user’s behalf. Screen sharing is different: MDM cannot simply set it to Allow, but can let a standard user approve it. The documented catalog profile therefore uses Allow for Accessibility and standard-user approval for Screen Capture. Microsoft Learn.

Applicability

Apply this distinction when preparing the macOS native Remote Help application. Review the current supported platform and tenant requirements separately; the privacy profile is one part of readiness, not a complete remote-support deployment.

DSE recommendation

Write the helpdesk instructions with a visible user-approval step for screen sharing. Ask the profile reviewer to compare the two privacy services independently rather than copying the same authorization choice into both. Keep the application’s identity and code requirement aligned with the official example. Arrange a fallback contact method before the first support appointment so the user can receive guidance if sharing is not yet available.

Verification

Test with a standard user on a representative Mac. Confirm the intended Accessibility configuration and then observe the remaining screen-sharing approval experience. Verify an authorized support session only after the user completes the required step. Record what was granted through policy and what required interaction; do not mark the deployment unsuccessful solely because consent remains, or successful merely because the configuration profile arrived.

Official references

Microsoft Learn: Deploy Remote Help with Microsoft Intune.