Workstatus Visible App Installation on Mac Using MDM with Ansible

1. Overview

This document explains how to install the Workstatus Visible App on Mac systems remotely using an Ansible server.
The installation requires:

• A Linux-based Ansible Server
• Ansible
• SSH
• A target Mac system with Remote Login enabled
• Workstatus Visible App installation package
• User's Mac username and password
• Workstatus user email address

2. Server System Setup

The Server System is the Linux machine from which the Workstatus Visible App installation will be triggered.

2.1 Server System Requirements

The server system must be a Linux-based system with the following packages installed:

• Ansible
• SSH
• Software Properties Common

2.2 Install Ansible

Open the terminal on the Linux server and run the following commands:

• sudo apt update
• sudo apt install ssh -y
• sudo apt install software-properties-common -y
• sudo add-apt-repository --yes --update ppa:ansible/ansible
• sudo apt install ansible -y

Verify Ansible Installation
Run: ansible --version
If Ansible is installed successfully, the installed Ansible version will be displayed.
Example:
ansible [core ...]

2.3. Enable SSH on the Server

SSH is required for communication between the Ansible server and the target Mac system.
Note: This step is required only if SSH is not already enabled on the server.
Start the SSH service :

• sudo systemctl start ssh

Enable SSH to start automatically after reboot :

• sudo systemctl enable ssh

Check SSH service status :

• sudo systemctl status ssh

The status should show:
Active: active (running)

4. Mac User System Setup

The Mac User System is the target Mac on which the Workstatus Visible App will be installed.

4.1 Enable Remote Login

On the user's Mac:

• Open System Settings.
• Go to General.
• Select Sharing.
• Enable Remote Login.
• Make sure the required user account is allowed to access the Mac through SSH.

The Mac must be connected to the network and reachable from the Ansible server.

5. Server System Action

5.1.Download Workstatus Installation Package

Download Workstatus Mac Visible App installation package.
The package should contain the required installation files, such as:

• inventory.ini
• mac_visible.sh

Extract the ZIP file on the Ansible server.

5.2. Configure the Ansible Inventory File

Open the inventory.ini file.
The inventory file contains the information required for Ansible to connect to the target Mac system.
Enter the following details:

• Mac system IP address
• Mac username
• Mac password
• Workstatus user email address

Example
1XX.1XX.3.X user=admin pass=admin email=useremail@example.com

For multiple Mac systems, add each Mac system on a separate line.
Example:
1XX.1XX.3.10 user=admin pass=admin email=user1@example.com
1XX.1XX.3.11 user=admin pass=admin email=user2@example.com
1XX.1XX.3.12 user=admin pass=admin email=user3@example.com

Note: Replace the example values with the actual Mac system details.

Security Recommendation

Avoid storing plain-text Mac passwords in inventory.ini for production deployments. Where possible, use Ansible Vault or another secure credential mechanism to protect passwords.

6. Verify Mac Connectivity

Before starting the installation, verify that the Ansible server can communicate with the target Mac.
Test SSH connectivity using:

• ssh username@MAC_IP_ADDRESS

Example:

• ssh admin@1XX.1XX.3.10

If the connection is successful, exit the SSH session:

• exit

You can then proceed with the Ansible installation.

7. Run the Workstatus Visible App Installation

Open the terminal on the Ansible server and navigate to the directory containing:

Run the installation script:

• source mac_visible.sh

The script will use the information provided in inventory.ini to:

• Connect to the target Mac system through SSH.
• Authenticate with the Mac user account.
• Transfer the required Workstatus installation files.
• Install the Workstatus Visible App.
• Configure the Workstatus user email.
• Complete the remote installation process.

8. Configure macOS Permissions

Open:System Settings → Privacy & Security
The following permissions must be configured for Workstatus.
Important: For each permission below, add both:

• Workstatus from the Applications folder.
• Workstatus from the Workstatus Application Support folder.

8.1 Full Disk Access

• Open System Settings.
• Go to Privacy & Security.
• Select Full Disk Access.
• Click the + icon.
• Add Workstatus from the Applications folder.
• Click the + icon again.
• Press Command + Shift + G.
• Enter the following path:/Users/SystemName/Library/Application Support/Workstatus
• Replace SystemName with the actual macOS username.
• Select Workstatus and click Open/Add.
• Ensure the Workstatus entries are enabled.

8.2 Accessibility

• Go to System Settings → Privacy & Security → Accessibility.
• Click the + icon.
• Add Workstatus from the Applications folder.
• Click the + icon again.
• Press Command + Shift + G.
• Enter the following path:/Users/SystemName/Library/Application Support/Workstatus
• Replace SystemName with the actual macOS username.
• Select Workstatus and click Open/Add.
• Ensure the Workstatus entries are enabled.

8.3 Input Monitoring

• Go to System Settings → Privacy & Security → Input Monitoring.
• Click the + icon.
• Add Workstatus from the Applications folder.
• Click the + icon again.
• Press Command + Shift + G.
• Enter the following path:/Users/SystemName/Library/Application Support/Workstatus
• Replace SystemName with the actual macOS username.
• Select Workstatus and click Open/Add.
• Ensure the Workstatus entries are enabled.

8.4 Screen & System Audio Recording

• Go to System Settings → Privacy & Security → Screen & System Audio Recording.
• Click the + icon.
• Add Workstatus from the Applications folder.
• Click the + icon again.
• Press Command + Shift + G.
• Enter the following path:/Users/SystemName/Library/Application Support/Workstatus
• Replace SystemName with the actual macOS username.
• Select Workstatus and click Open/Add.
• Ensure the Workstatus entries are enabled.

9. Verify the Installation on Mac

After the installation is completed, log in to the target Mac and verify that:

• Workstatus Visible App is installed.
• The application launches successfully.
• The correct Workstatus user account is configured.
• The application can connect to the Workstatus server.
• Tracking starts successfully.
• Screenshots and activity tracking work as expected.
• Required macOS permissions are granted.

For features such as Screen Recording and Accessibility, verify that the required permissions are enabled in:
System Settings → Privacy & Security

Important Notes

• The Ansible server is Linux-based, while the target/user system is macOS.
• Remote Login must be enabled on the target Mac.
• The Mac must be reachable from the Ansible server over SSH.
• Use secure credential handling instead of storing production passwords in plain text.
• macOS privacy permissions may still require configuration after installation, depending on the deployment method and macOS version.

Updated on: 07/09/2026