Iru (formerly Kandji) is a device management platform used to remotely manage devices, applications, and configurations at the organizational level. This guide provides instructions for remotely enabling the required system permissions and deploying the Insightful agent on company-managed macOS devices.
The document outlines a step-by-step process for deploying a custom configuration profile and installing Insightful for end users. As prerequisites, target devices must be enrolled in Kandji and assigned to an appropriate Blueprint.
Step 1: Deploy a Configuration profile
A Configuration profile is a settings file used to configure devices. Deploying it on your employees' MacOS devices will ensure that the necessary permissions are enabled for Insightful to function properly.
You can find instructions for obtaining the configuration profile in our article on How to handle macOS permissions remotely via configuration profiles.
Log into Iru Login Portal
Go to the Library:
Click on the Add Library Item button:
Search for Custom Profile and choose this item below:
Enter Title, uncheck all the device types but Mac, and assign to a desired blueprint:
Scroll down and upload the provided configuration profile:
Review the profile and click on the Save button:
Multiple Configuration profiles
If you have received multiple configuration profiles from the Support team, please repeat this process for each configuration profile separately.
Deleting old Configuration profiles
If you need to set new configuration profiles, make sure all the old instances of configuration profiles are deleted (if there were any) in order for the new ones to work as intended.
Configuration profiles before App deployment
Always deploy the configuration profile before installing Insightful via Iru, and ensure that these have been successfully applied to the assigned devices. This ensures all required permissions are granted in advance and helps avoid unnecessary user prompts during or after deployment.
Step 2: Deploy the installation script
After deploying a configuration profile, go back to the Home page.
Go to the Library → Add Library Item → search for Custom Script and choose the item below:
Add Title, and assign to a desired blueprint:
Scroll down and for script frequency, choose Run once per device:
Scroll down further, and in the Audit Script field, you should enter your own installation script created using the next steps:
Put #!/bin/bash in the first line of the script.
Go to your Insightful admin dashboard:
Go to the Employees tab.
Click on the Add New Employee button.
Select Company Computers.
Select macOS.
Copy the code you see using Copy Code.
Paste the code in the second line of this field in Kandji
Note: The script in the screenshot above is just the example script with grayed-out parts, while you should create yours per the instructions in the previous steps
Review the script and click Save
Step 3: Verify Deployment
Monitor Configuration Profile deployment:
Go to Library → click on created Configuration Profile → Status:
Monitor Script deployment:
Go to Library → click on created Workpuls script → Status:
Monitor deployment from the device side:
Go to Devices → click on device → check the status of each deployment:
Best Practices:
Test Scripts: Always test the script on a test device/blueprint before deploying it via Iru.
Documentation: Maintain clear documentation of what each script or profile does.