If you’re asked to approve a profile on Mac
A configuration profile is an XML file used to distribute configuration information to managed Apple devices. Configuration profiles automate the configuration of settings, accounts, restrictions, and credentials. There are three types of profiles: user, device, and mobile device management (MDM) enrollment. If you see a configuration file, your Mac may be a managed computer. See About Managed Apple Accounts.
Enrollment profile installed with user consent
An enrollment profile that is sent to you by your IT administrator can be considered fully trusted. You approve the installation and all features of that profile are available.
Enrollment profile installed without user consent
An enrollment profile can also be installed without your consent:
By a malicious app.
By an installer package.
Remotely via the command line, by someone who knows the administrator user name and password (if Remote Login is enabled).
Using screen sharing.
Because this enrollment profile isn’t approved by you, the User Approved Kernel Extension Loading configuration payload won’t have any effect on your Mac. To allow management of User Approved Kernel Extension Loading, contact your trusted IT administrator before you approve the enrollment profile. Approving an unsigned or unknown enrollment profile isn’t recommended.
Important: This additional level of security prevents a malicious enrollment profile from being installed and used to remotely manage your Mac and obtain information you would rather keep private.
For information about Apple’s privacy policy, see the Apple Privacy Policy website.