> ## Knowledge Base Index
> Fetch the complete knowledge base index at: https://support.workstatus.io/sitemap.xml
> Use this file to discover available pages before exploring further.
> Pure-Markdown content can be obtained by appending a '.md' suffix to the content URLs listed in the sitemap (without the trailing slash).

# Workstatus Visible App Installation on Mac Using MDM with Ansible

# Workstatus Visible App Installation on Mac Using MDM with Ansible
### 1. Overview
This document explains how to install the **Workstatus Visible App on Mac systems remotely** using an **Ansible server**.
The installation requires:
* A Linux-based Ansible Server
* Ansible
* SSH
* A target Mac system with Remote Login enabled
* Workstatus Visible App installation package
* User's Mac username and password
* Workstatus user email address

### 2. Server System Setup
The **Server System** is the Linux machine from which the Workstatus Visible App installation will be triggered.
###### 2.1 Server System Requirements
The server system must be a **Linux-based system** with the following packages installed:
* Ansible
* SSH
* Software Properties Common

###### 2.2 Install Ansible
Open the terminal on the Linux server and run the following commands:
* sudo apt update
* sudo apt install ssh -y
* sudo apt install software-properties-common -y
* sudo add-apt-repository --yes --update ppa:ansible/ansible
* sudo apt install ansible -y
Verify Ansible Installation
Run: **ansible --version**
If Ansible is installed successfully, the installed Ansible version will be displayed.
Example:
**ansible [core ...]**

###### 2.3. Enable SSH on the Server
SSH is required for communication between the Ansible server and the target Mac system.
**Note:** This step is required only if SSH is not already enabled on the server.
**Start the SSH service :**
* sudo systemctl start ssh
**Enable SSH to start automatically after reboot :**
* sudo systemctl enable ssh
**Check SSH service status :**
* sudo systemctl status ssh
The status should show:
 Active: active (running)

### 4. Mac User System Setup
The **Mac User System** is the target Mac on which the Workstatus Visible App will be installed.
###### 4.1 Enable Remote Login
On the user's Mac:
* Open **System Settings**.
* Go to **General**.
* Select **Sharing**.
* Enable **Remote Login**.
* Make sure the required user account is allowed to access the Mac through SSH.
The Mac must be connected to the network and reachable from the Ansible server.

![](https://storage.crisp.chat/users/helpdesk/website/-/f/3/e/4/f3e4eb6758a66800/screenshot2_2s194w.png)


### 5. Server System Action
###### 5.1.Download Workstatus Installation Package
Download [Workstatus Mac Visible App installation package](https://app.workstatus.io./downloads/documents/mac/Mac_Visible_Ansible.zip).
The package should contain the required installation files, such as:
* inventory.ini
* mac\_visible.sh
Extract the ZIP file on the Ansible server.

###### 5.2. Configure the Ansible Inventory File
Open the `inventory.ini` file.
The inventory file contains the information required for Ansible to connect to the target Mac system.
Enter the following details:
* Mac system IP address
* Mac username
* Mac password
* Workstatus user email address
**Example**
1XX.1XX.3.X user=admin pass=admin email=useremail@example.com

For multiple Mac systems, add each Mac system on a separate line.
Example:
1XX.1XX.3.10 user=admin pass=admin email=user1@example.com
1XX.1XX.3.11 user=admin pass=admin email=user2@example.com
1XX.1XX.3.12 user=admin pass=admin email=user3@example.com

**Note:** Replace the example values with the actual Mac system details.

###### Security Recommendation
Avoid storing plain-text Mac passwords in `inventory.ini` for production deployments. Where possible, use **Ansible Vault** or another secure credential mechanism to protect passwords.

### 6. Verify Mac Connectivity
Before starting the installation, verify that the Ansible server can communicate with the target Mac.
Test SSH connectivity using:
* ssh username@MAC\_IP\_ADDRESS
Example:
* ssh admin@1XX.1XX.3.10
If the connection is successful, exit the SSH session:
* exit
You can then proceed with the Ansible installation.

### 7. Run the Workstatus Visible App Installation
Open the terminal on the Ansible server and navigate to the directory containing:

Run the installation script:
* source mac\_visible.sh
The script will use the information provided in `inventory.ini` to:
* Connect to the target Mac system through SSH.
* Authenticate with the Mac user account.
* Transfer the required Workstatus installation files.
* Install the Workstatus Visible App.
* Configure the Workstatus user email.
* Complete the remote installation process.

### 8. Configure macOS Permissions
Open:**System Settings → Privacy & Security**
The following permissions must be configured for Workstatus.
**Important:** For each permission below, add **both**:
* Workstatus from the **Applications** folder.
* Workstatus from the Workstatus Application Support folder.

###### 8.1 Full Disk Access
* Open **System Settings**.
* Go to **Privacy & Security**.
* Select **Full Disk Access**.
* Click the **`+`** icon.
* Add **Workstatus** from the **Applications** folder.
* Click the **`+`** icon again.
* Press **Command + Shift + G**.
* Enter the following path:`/Users/SystemName/Library/Application Support/Workstatus`
* Replace `SystemName` with the actual macOS username.
* Select **Workstatus** and click **Open/Add**.
* Ensure the Workstatus entries are enabled.

###### 8.2 Accessibility
* Go to **System Settings → Privacy & Security → Accessibility**.
* Click the **`+`** icon.
* Add **Workstatus** from the **Applications** folder.
* Click the **`+`** icon again.
* Press **Command + Shift + G**.
* Enter the following path:`/Users/SystemName/Library/Application Support/Workstatus`
* Replace `SystemName` with the actual macOS username.
* Select **Workstatus** and click **Open/Add**.
* Ensure the Workstatus entries are enabled.

###### 8.3 Input Monitoring
* Go to **System Settings → Privacy & Security → Input Monitoring**.
* Click the **`+`** icon.
* Add **Workstatus** from the **Applications** folder.
* Click the **`+`** icon again.
* Press **Command + Shift + G**.
* Enter the following path:`/Users/SystemName/Library/Application Support/Workstatus`
* Replace `SystemName` with the actual macOS username.
* Select **Workstatus** and click **Open/Add**.
* Ensure the Workstatus entries are enabled.

###### 8.4 Screen & System Audio Recording
* Go to **System Settings → Privacy & Security → Screen & System Audio Recording**.
* Click the **`+`** icon.
* Add **Workstatus** from the **Applications** folder.
* Click the **`+`** icon again.
* Press **Command + Shift + G**.
* Enter the following path:`/Users/SystemName/Library/Application Support/Workstatus`
* Replace `SystemName` with the actual macOS username.
* Select **Workstatus** and click **Open/Add**.
* Ensure the Workstatus entries are enabled.

### 9. Verify the Installation on Mac
After the installation is completed, log in to the target Mac and verify that:
* Workstatus Visible App is installed.
* The application launches successfully.
* The correct Workstatus user account is configured.
* The application can connect to the Workstatus server.
* Tracking starts successfully.
* Screenshots and activity tracking work as expected.
* Required macOS permissions are granted.
For features such as **Screen Recording** and **Accessibility**, verify that the required permissions are enabled in:
**System Settings → Privacy & Security**

###### Important Notes
* The **Ansible server is Linux-based**, while the **target/user system is macOS**.
* **Remote Login must be enabled on the target Mac**.
* The Mac must be reachable from the Ansible server over SSH.
* Use secure credential handling instead of storing production passwords in plain text.
* macOS privacy permissions may still require configuration after installation, depending on the deployment method and macOS version.