SEM - SentinelOne | Authorizing MacOS Full Disk Access for SentinelOne

If the SentinelOne icon shows "Need user attention", "user_action_needed_rs_fda", "user_action_needed_fda_helper", or "user_action_needed_fda_sentinelid"

Important: This is done only once on an endpoint. If already done on the endpoint, do not repeat it when the Agent is updated. If you do not complete this prerequisite step, the macOS Agent will not have full visibility to all files from all users.

**Occasionally after an OS update or upgrade you may be required to complete this step again**

Authorize Full Disk Access to these processes:
  • sentineld

  • sentineld_helper

  • For Agents 21.5 and lower, Authorize Full Disk Access to sentinel_shell

  • For Agents 21.7 and later, Authorize Full Disk Access to sentineld_shell

To Authorize Full Disk Access on a local computer:
  1. On the local computer, open System Preferences.

     
    MacSystemPrefs
  2. Click Security & Privacy, and select the Privacy tab.

     
    MacSecPrivSettings
  3. Click the lock to make changes.

  4. In the left pane, click Full Disk Access.

  5. Click the + icon.

     
    MaSecPrivFullDiskAccess
  6. Press and hold Command+Shift+G at the same time to open the Go to the folder menu.

     
    MacOSKeyboard
  7. Enter the path:

    /Library/Sentinel/sentinel-agent.bundle/Contents/MacOS/
  8. Click Go.

    • sentineld.app

    • sentineld_helper.app

    • For Agents 21.5 and lower, Authorize Full Disk Access to sentinel_shell.app

    • For Agents 21.7 and later, Authorize Full Disk Access to sentineld_shell.app

      Select the SentinelOne applications, and click Open:

     
    MacOSSentDHelperShell

    Optional: Drag and drop the SentinelOne applications into the Security & Privacy window.

    1. Open a Finder window.

    2. Navigate to /Library/Sentinel.

    3. Right-click the sentinel-agent.bundle, and select Show Package Contents.

    4. Navigate to the /Contents/MacOS/ folder.

    5. Select the required SentinelOne applications, and drag the applications to the Security & Privacy window.

  9. Close System Preferences.