The security and privacy settings profile lets you configure Apple's Gatekeeper functionality settings, which are used for secure application downloads. Gatekeeper also controls specific settings related to user passwords.

To create a security and privacy profile: 

  1. Navigate to Devices > Profiles & Resources > Profiles and select Add. Select Apple macOS, and then select whether this profile will apply to only the enrollment user on the device ( User Profile), or the entire device ( Device Profile).
  2. Configure the profile's General settings.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  3. Select the Security and Privacy payload.
  4. Choose locations from which apps may be downloaded.
  5. Configure Security and Privacy settings: 

    Setting Description

    Choose to restrict which types of applications may be downloaded. Or, select Do not allow user to override Gatekeeper setting to prevent the user from modifying settings to Gatekeeper.


    Set security options to allow users to change password (macOS 10.9+), require password after sleep or screen saver begins, and allow user to set lock message (macOS 10.9+). Select a Grace Period to determine when a password should be entered if Require password after sleep or screensaver begins is selected.


    Set to automatically send diagnostic and usage data to Apple.

  6. Select Save & Publish when you are finished to push the profile to devices.