{"id":54953,"date":"2021-10-05T11:00:00","date_gmt":"2021-10-05T15:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=54953"},"modified":"2024-11-14T19:01:40","modified_gmt":"2024-11-15T00:01:40","slug":"granting-permissions-monterey-pluggable-authentication-modules","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules","title":{"rendered":"Granting Permissions for Monterey Pluggable Authentication Modules (PAM)"},"content":{"rendered":"\n<p>Apple\u2019s new operating system, macOS Monterey, is due for release in October. Along with all the usability and feature changes come changes to the underpinnings of macOS. Apple continues to increase security of their operating system and, while this is desirable, it also poses some unique challenges for developers and integrators.&nbsp;<\/p>\n\n\n\n<p>The most impactful security change for IT Admins in Monterey is a set of new restrictions that Apple has implemented around access to the Pluggable Authentication Module (PAM) directory located at \/etc\/pam.d. <\/p>\n\n\n\n<p>JumpCloud\u2019s ability to sync your user password to the computer at the login window is an example of a PAM. With macOS Monterey, Apple will require that any process (such as our login mechanism) which requires access to the directory \/etc\/pam.d\/ has the consent of an admin user on the system. Alternatively, consent may be granted by an admin through an MDM profile.<\/p>\n\n\n\n<p>This may mean you have some necessary actions to take to preserve some core JumpCloud functionality before your end users update to the latest OS. First and foremost, until you have prepared for this, it is recommended that you configure the Block Monterey Installation policy in JumpCloud so that your users don\u2019t jump the gun.<\/p>\n\n\n\n<p>As an IT professional, you fall into one of these three camps: a) you are using JumpCloud MDM to manage your Mac fleet, b) you are using a third party MDM, or c) you aren&#8217;t using any MDM for Monterey <a href=\"https:\/\/jumpcloud.com\/blog\/macos-patch-management\">MacOS management<\/a>. Below are the steps you can follow to ensure the above functionality is preserved:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">JumpCloud MDM<\/h3>\n\n\n\n<p>If you are using<a href=\"https:\/\/jumpcloud.com\/platform\/mdm\"> JumpCloud as your MDM<\/a>, you are all set to go. The agent will update in preparation for the impending OS release and that will include granting the permissions necessary to carry out the consent. You won\u2019t have to do a thing. If you have a new install, we will deploy an MDM profile to grant access to the directory at the time of enrollment.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Third Party MDM<\/h3>\n\n\n\n<p>If, however, you are integrating JumpCloud with a separate MDM provider, you will need to manage this event differently. For this use case, the PAM module we use for authorization <strong>requires a new permission <\/strong>and you will need to grant access by&nbsp;<\/p>\n\n\n\n<ol>\n<li>Manually granting the agent permission in <strong>System Preferences<\/strong> &gt; <strong>Security &amp; Privacy<\/strong> &gt; <strong>Privacy<\/strong> &gt; <strong>Full Disk Access;<\/strong> or,<\/li>\n\n\n\n<li>Downloading our <a href=\"https:\/\/jumpcloud-support.force.com\/support\/s\/article\/Granting-Permissions-Needed-for-MacOS-Monterey\">preconfigured profile<\/a> and then importing it into and distributing it from your MDM.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\">No MDM<\/h3>\n\n\n\n<p>If you are not yet managing your macs through Apple MDM at all\u2026 this is a good opportunity to make a change. Timing may be tight, but <a href=\"https:\/\/support.jumpcloud.com\/s\/article\/Setting-Up-MDM\" target=\"_blank\" rel=\"noreferrer noopener\">setting up JumpCloud MDM<\/a> for this task is pretty easy.&nbsp;<a href=\"https:\/\/console.jumpcloud.com\/signup\" target=\"_blank\" rel=\"noreferrer noopener\">Sign up for a trial of JumpCloud <\/a>and test it out yourself. <\/p>\n","protected":false},"excerpt":{"rendered":"<p>You have some necessary actions to take before your end users update to the latest OS.<\/p>\n","protected":false},"author":153,"featured_media":48134,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[23],"tags":[2418,2423,2422,2435,2388],"collection":[2778,2776],"platform":[],"funnel_stage":[3014],"coauthors":[2518],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Monterey Pluggable Authentication Modules (PAM) - JumpCloud<\/title>\n<meta name=\"description\" content=\"You have some necessary actions to take before your end users update to the latest OS.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Granting Permissions for Monterey Pluggable Authentication Modules (PAM)\" \/>\n<meta property=\"og:description\" content=\"You have some necessary actions to take before your end users update to the latest OS.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2021-10-05T15:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-11-15T00:01:40+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"780\" \/>\n\t<meta property=\"og:image:height\" content=\"520\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Pam Lefkowitz\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Pam Lefkowitz\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules\"},\"author\":{\"name\":\"Pam Lefkowitz\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/2f96f2e7926ef814173cefbd4e0c7e88\"},\"headline\":\"Granting Permissions for Monterey Pluggable Authentication Modules (PAM)\",\"datePublished\":\"2021-10-05T15:00:00+00:00\",\"dateModified\":\"2024-11-15T00:01:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules\"},\"wordCount\":477,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg\",\"keywords\":[\"Admin Life\",\"Admin Tools\",\"Be Cyber Smart\",\"macOS Monterey\",\"tutorial\"],\"articleSection\":[\"Best Practices\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules\",\"url\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules\",\"name\":\"Monterey Pluggable Authentication Modules (PAM) - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg\",\"datePublished\":\"2021-10-05T15:00:00+00:00\",\"dateModified\":\"2024-11-15T00:01:40+00:00\",\"description\":\"You have some necessary actions to take before your end users update to the latest OS.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg\",\"width\":780,\"height\":520},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Granting Permissions for Monterey Pluggable Authentication Modules (PAM)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/2f96f2e7926ef814173cefbd4e0c7e88\",\"name\":\"Pam Lefkowitz\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/69352a9958671b8b13e2ddb62aec40f7\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d721f0f58aa124a6e91f519f4317eb58?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d721f0f58aa124a6e91f519f4317eb58?s=96&d=mm&r=g\",\"caption\":\"Pam Lefkowitz\"},\"description\":\"Pam is an IT Columnist at JumpCloud where she uses her experience as a consultant and MSP to write about IT admin life and tech. Outside of (remote) work hours, she spends her time with her dog, visiting her kids across the country, and being creative with fiber.\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Monterey Pluggable Authentication Modules (PAM) - JumpCloud","description":"You have some necessary actions to take before your end users update to the latest OS.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules","og_locale":"en_US","og_type":"article","og_title":"Granting Permissions for Monterey Pluggable Authentication Modules (PAM)","og_description":"You have some necessary actions to take before your end users update to the latest OS.","og_url":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules","og_site_name":"JumpCloud","article_published_time":"2021-10-05T15:00:00+00:00","article_modified_time":"2024-11-15T00:01:40+00:00","og_image":[{"width":780,"height":520,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg","type":"image\/jpeg"}],"author":"Pam Lefkowitz","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Pam Lefkowitz","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules"},"author":{"name":"Pam Lefkowitz","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/2f96f2e7926ef814173cefbd4e0c7e88"},"headline":"Granting Permissions for Monterey Pluggable Authentication Modules (PAM)","datePublished":"2021-10-05T15:00:00+00:00","dateModified":"2024-11-15T00:01:40+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules"},"wordCount":477,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg","keywords":["Admin Life","Admin Tools","Be Cyber Smart","macOS Monterey","tutorial"],"articleSection":["Best Practices"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules","url":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules","name":"Monterey Pluggable Authentication Modules (PAM) - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg","datePublished":"2021-10-05T15:00:00+00:00","dateModified":"2024-11-15T00:01:40+00:00","description":"You have some necessary actions to take before your end users update to the latest OS.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2020\/10\/office-hours-recap-apple-mdm.jpg","width":780,"height":520},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/granting-permissions-monterey-pluggable-authentication-modules#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"Granting Permissions for Monterey Pluggable Authentication Modules (PAM)"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/2f96f2e7926ef814173cefbd4e0c7e88","name":"Pam Lefkowitz","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/69352a9958671b8b13e2ddb62aec40f7","url":"https:\/\/secure.gravatar.com\/avatar\/d721f0f58aa124a6e91f519f4317eb58?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d721f0f58aa124a6e91f519f4317eb58?s=96&d=mm&r=g","caption":"Pam Lefkowitz"},"description":"Pam is an IT Columnist at JumpCloud where she uses her experience as a consultant and MSP to write about IT admin life and tech. Outside of (remote) work hours, she spends her time with her dog, visiting her kids across the country, and being creative with fiber."}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/54953"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/153"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=54953"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/54953\/revisions"}],"predecessor-version":[{"id":117571,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/54953\/revisions\/117571"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/48134"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=54953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=54953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=54953"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=54953"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=54953"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=54953"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=54953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}