If you’re asked to approve a profile on Mac
A configuration profile is an XML file used to distribute configuration information to managed Apple devices. Configuration profiles automate the configuration of settings, accounts, restrictions and credentials. There are three types of profiles: user, device and mobile device management (MDM) enrolment. If you see a configuration file, your Mac may be a managed computer. See About Managed Apple ID accounts on Mac.
More than one profile of this type allowed?
Requires administrator privileges to install?
Varies by profile contents
Enrolment profile installed with user consent
An enrolment profile that is sent to you by your IT administrator can be considered fully trusted. You approve the installation and all features of that profile are available.
Enrolment profile installed without user consent
An enrolment profile can also be installed without your consent:
By a malicious app.
By an Installer package.
Remotely via the command line, by someone who knows the administrator username and password (if Remote Login is enabled).
Using screen sharing.
Because this enrolment profile isn’t approved by you, the User Approved Kernel Extension Loading configuration payload won’t have any effect on your Mac. To allow management of User Approved Kernel Extension Loading, contact your trusted IT administrator before you approve the enrolment profile. Approving an unsigned or unknown enrolment profile isn’t recommended.
Important: This additional level of security prevents a malicious enrolment profile from being installed and used to remotely manage your Mac and obtain information you would rather keep private.