SkipToTheEndpoint
macOS policies include both Allowed and Authorization
Two macOS policies includes both Allowed and Authorization properties in Privacy Preferences Policy Control.
Policies in question: MacOS - OIB - Defender Antivirus - D - MDE Configuration - v1.0 MacOS - OIB - Microsoft OneDrive - D - Service and Access - v1.0
Per Apple's documentation Allowed and Authorization shouldn't be used at the same time.
Suggested solution: Remove Authorization properties from both policies.
@SkipToTheEndpoint Any Update on this? Had the same issue and got this solved. So there should be a v1.1 for these settings with removal of the Authorization Setting.
I made a few tests. Seems like the Authorization Attribute is the newer one. The "Screen Capture" Privacy Settings can only be configured by the Authorization Attribute with the Setting "AllowStandardUserToSetSystemService" because Apple won't let you allow this via MDM without User Interaction.
So maybe i would be better to switch to Athorization insted of Allowed
Per Apple's documentation Allowed and Authorization shouldn't be used at the same time.
Intune also states, when hovering over the info icon beside the "Authorization" key: The Authorization key is an optional replacement for the Allowed key. Every payload must specify either Authorization or Allowed, but not both.
I removed the "Allow" key, like @Julian0o suggested above, and this resolved the error 10022 described in https://github.com/SkipToTheEndpoint/OpenIntuneBaseline/issues/62.
