Legacy PPPC profiles and macOS 26/27 declarative App Settings, in one builder
What it generates
PPPC Builder prepares legacy privacy profiles and macOS declarative App Settings for the permissions that the selected operating-system mode supports. It emits either a .mobileconfig XML profile or a JSON declarative configuration for download and review.
Available at no cost in any modern web browser. JavaScript is required to generate output.
Use it when an app needs a managed privacy setting with a known bundle identifier and code requirement. Do not use a PPPC profile for permissions Apple requires the user to approve.
Added macOS 26/27 support with a mode toggle: legacy PPPC profile vs declarative App Settings
Added a declarative com.apple.configuration.app.settings generator for macOS Privacy permission defaults (Accessibility, Bluetooth, Camera, Dictation, Local Network, Location, Microphone)
Flagged the five services deprecated in macOS 27 (Accessibility, Camera, Microphone, Speech Recognition, Bluetooth); noted Accessibility can no longer be granted by a PPPC profile in macOS 27
Kept Full Disk Access and Screen Recording on the legacy PPPC path — they have no declarative equivalent
v1.1.1
Added CodeRequirement tooltip showing expected format with identifier, anchor, and certificate leaf pattern
v1.1.0
Added code requirement template helper with "Insert Template" button
Added macOS version annotations to all applicable TCC services
Added deployment scope guidance (User vs Device level)
Added AppleEvents receiver empty field warning
Fixed deny-only service lookup using correct function
Added URL state sharing
v1.0.1
Fixed deny-only services (Camera, Microphone) still generating "Allow" in XML — now forced to "Deny" in output
Added deprecation label to Developer Tool service (not in current Apple MDM docs)