Grant Full Disk Access on Mac devices in Nebula

Due to Apple's Transparency, Consent, and Control (TCC) feature, the Endpoint Agent requires Full Disk Access (FDA) in order to scan all disk locations for threats. FDA must be granted on endpoints running the following versions of macOS:

• Sequoia 15
• Sonoma 14
• Ventura 13
• Monterey 12
• Big Sur 11
• Catalina 10.15
• Mojave 10.14

This article details how to manually provide FDA to the endpoint agent on macOS devices.

Grant FDA on macOS Sequoia 15, Sonoma 14, and Ventura 13

Manually grant FDA on endpoints running macOS Sequoia 15, Sonoma 14, and Ventura 13. 

1. On the affected Mac device, you see an alert indicator  on the menu bar icon.
2. Click on the icon to open a context menu. Click on Current Issues.
3. The Full Disk Access requirement window displays.
4. Click Open preferences.
5. The System Settings > Privacy & Security > Full Disk Access window opens.
6. Toggle on Full Disk Access for Malwarebytes Protection and Malwarebytes Endpoint Agent in the list. 
7. Enter the user's password.

Grant FDA on macOS Monterey 12, Big Sur 11 and Catalina 10.15

Manually grant FDA on endpoints running macOS Monterey 12, Big Sur 11, and Catalina 10.15.

1. On the affected Mac device, you see an alert indicator  on the menu bar icon.
2. Click on the icon to open a context menu. Click on Current Issues.
3. The Full Disk Access requirement window displays.
4. Click the button to Open System Preferences.
5. Navigate to Security & Privacy, then click the Privacy tab.
6. Scroll down to find Full Disk Access and select it.
7. Click the lock icon at the bottom-left corner of the windows to make Privacy changes.
8. You are prompted to enter your login Password to allow changes to your Security & Privacy.
9. Click Unlock.
10. Toggle on Full Disk Access for Malwarebytes Protection and Malwarebytes Endpoint Agent in the list. 
11. Click the lock icon at the bottom-left corner to prevent further settings changes.

Grant FDA on macOS Mojave 10.14

Manually grant FDA on endpoints running macOS Mojave 10.14.

1. On the affected Mac device, click on the Apple icon > System Preferences.
2. Navigate to Security & Privacy, then click the Privacy tab.
3. Locate and select Full Disk Access.
4. Click the lock icon at the bottom-left corner of the windows to make Privacy changes.
5. You are prompted to enter your login Password to allow changes to your Security & Privacy.
6. Click Unlock.
7. Click the + to manually add following apps:
   • /Library/Application\ Support/Malwarebytes/Malwarebytes\ Endpoint\ Agent/EndpointAgentDaemon.app
   • /Library/Application\ Support/Malwarebytes/NCEP/Engine.bundle/Contents/PlugIns/RTProtectionDaemon.app
8. If not enabled, toggle on Full Disk Access for those two apps Malwarebytes Endpoint Agent and Malwarebytes Protection.
9. Click the lock icon at the bottom-left corner to prevent further settings changes.

For instructions on granting FDA with a User Approved Mobile Device Management (UAMDM), see Grant Full Disk Access for Mac endpoints using UAMDM - Nebula.