The Insightful Agent for macOS includes an option that allows organizations to require specific macOS permissions before employees can clock in.
This feature helps ensure that tracking data is collected accurately from the start of the shift. If required permissions are not granted, the Agent prevents the employee from starting a shift until the permissions are enabled.
This setting is controlled at the organization level and applies to all macOS Agents in that organization.
Prevent Clock-In on macOS Until Necessary Permissions Are Granted
Administrators can enable an organization-level setting that prevents clock-in on macOS devices until required system permissions are granted.
When enabled, the Agent verifies that the necessary macOS permissions are granted before allowing an employee to start a shift.
This helps ensure that activity tracking and screenshots (when enabled) function correctly from the beginning of the shift.
How the Setting Works
When the Block clock-in until macOS permissions are allowed setting is enabled, the Agent verifies that the required macOS permissions are granted before allowing employees to start a shift.
The permission check occurs when an employee attempts to clock in.
If required permissions are missing:
The Agent prevents the employee from starting a shift.
A clear prompt appears within the Agent explaining which permission is missing.
The prompt includes a direct link guiding the employee to the relevant macOS System Settings screen.
The Clock-In button remains disabled until the required permissions are granted.
Once the permissions are granted, the employee can clock in immediately without restarting the Agent.
This verification applies to:
Manual clock-in
Project-based clock-in
It applies to:
macOS Agents only
Both personal and company computers
It does not apply to Windows or Linux Agents.
Required macOS Permissions
The Agent may require the following macOS permissions:
Accessibility
Screen Recording (only when applicable)
Accessibility Permission
Accessibility permission is always required when the organization enables the permission requirement setting.
If Accessibility permission is missing:
Clock-in is blocked.
The Agent displays a prompt directing the user to: macOS System Settings → Privacy & Security → Accessibility
The clock-in button remains disabled until the permission is granted.
Screen Recording Permission
Screen Recording permission is only required when screen capture features are enabled.
The Agent checks this permission only if at least one of the following conditions is met:
The employee has enabled Screenshots or Screen Recordings in their personal settings.
Screenshots or recordings are enabled on the active project.
If Screen Recording permission is required but not granted:
Clock-in is blocked.
The Agent displays a prompt directing the user to: macOS System Settings → Privacy & Security → Screen Recording
The clock-in button remains disabled until the permission is granted.
Once permission is granted, the employee can clock in without restarting the Agent.
When Screen Recording Permission Is Not Required
If screen capture features are not enabled, Screen Recording permission is not checked.
This happens when:
The employee has not enabled Screenshots or Screen Recordings in personal settings.
The active project does not allow screenshots or recordings.
In this case:
Only Accessibility permission is verified.
Screen Recording permission is not required.
Employees are not blocked by unnecessary permissions.
Enabling the Permission Requirement Setting
The permission requirement can be controlled by organization administrators.
Setting Location
The setting is available in:
Organization Settings → Advanced Tracking
Setting name:
Block clock-in until macOS permissions are allowed
Behavior
The setting is configured at the organization level.
The default state is Off.
When enabled, the setting applies to all macOS Agents in the organization.
There are no per-employee exceptions.
Changes take effect immediately for future clock-in attempts.