Authorizing Full Disk Access

The macOS makes sure that applications are installed in a secure way. It limits installation only to applications that are approved by Apple and the user. This change does not let applications access specified paths (such as Documents, Downloads, and Desktop) without user consent.

If the SentinelOne icon shows "Needs user attention" or these messages "Authorize Full-Disk-Access to SentinelOne in System Preferences", "Authorize SentinelOne components in System Preferences". Approve Full Disk Access for SentinelOne Apps in the System Settings.

Important: This is done only once on an endpoint. If already done on the endpoint, do not repeat it when the Agent is updated. If you do not complete this prerequisite step, the macOS Agent will not have full visibility to all files from all users.

Authorize Full Disk Access to these processes:

• sentineld

• sentineld_helper

• sentineld_shell

To Authorize Full Disk Access on a local computer:

1. On the local computer, open System Settings.

   

2. Click Privacy & Security, and select the Full Disk Access tab.

   

3. Click the + button.

   

4. Press and hold Command+Shift+G at the same time to open the Go to the folder menu.

   

5. Enter the path:

   /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/

6. Double click your destination folder..

   

7. Select the SentinelOne applications, and click Open:

   • sentineld.app

   • sentineld_helper.app

   • sentineld_shell.app

   • 
   
   

   

   Optional: Drag and drop the SentinelOne applications to the Full Disk Access list.

   1. Open a Finder window.

   2. Navigate to /Library/Sentinel.

   3. Right-click the sentinel-agent.bundle file, and click Show Package Contents.

   4. Navigate to the /Contents/MacOS/ folder.

   5. Select the required SentinelOne applications, and drag the applications to the Full Disk Access list.

8. Close System Settings.