@JRogers the profile for the agent's permissions should be created automatically. If you're not seeing that: make sure the device is enrolled with the MDM profile (not just the agent), and using a newer version of the agent (anything over 3.1.X should be good) which can be set in SM > Configure > General. After that, the agent's permission profile should be installed from SM automatically on macOS devices.  ... View more