Hello everybody

I found a way to counteract the current limitations by using vmware WorkspaceONE App Analyser for macOS (https://flings.vmware.com/workspace-one-app-analyzer-for-macos), which enables you to upload a generated profile directly into ws1. You can get all the neccessary information on the tool on the linked page above.

My piece of advice: There is an important detail to be mentionned for this usecase. I used this app on a VM to get the system extension and privacy preferences. Both will be caught fine by the tool. BUT: I had to create two seperate policies for the two payloads. If you combine both payloads into one profile it will cause a failure. If you split the payload into two profiles everything works fine.

So if you encounter similar issues, just make your profile atomic and keep one profile for each payload and try again.

Regards