GSA macOS client prerequisites and installation
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 363c793 · +163 −113 lines · also on GitHub
⋯ 11 unchanged lines
1212
---
1313
# Install the Global Secure Access client for macOS
1414
15
−The Global Secure Access client, an essential component of Global Secure Access, helps organizations manage and secure network traffic on end-user devices. The client's main role is to route traffic that needs to be secured by Global Secure Access to the cloud service. All other traffic goes directly to the network. The [Forwarding Profiles](concept-traffic-forwarding.md), configured in the portal, determine which traffic the Global Secure Access client routes to the cloud service.
15
+The Global Secure Access client, an essential component of Global Secure Access, helps organizations manage and secure network traffic on user devices. The client's main role is to route traffic that needs to be secured by Global Secure Access to the cloud service. All other traffic goes directly to the network. The [forwarding profiles](concept-traffic-forwarding.md) that you configure in the portal determine which traffic the Global Secure Access client routes to the cloud service.
1616
1717
This article describes how to download and install the Global Secure Access client for macOS.
1818
1919
## Prerequisites
2020
2121
- A Mac device with an Intel, M1, M2, M3, or M4 processor running macOS version 14 or later.
22
−- A device registered to a Microsoft Entra tenant using Company Portal.
22
+- A device registered to a Microsoft Entra tenant through the Company Portal app.
2323
- A Microsoft Entra tenant onboarded to Global Secure Access.
2424
- An internet connection.
25
−- For an SSO experience based on the user signed in to Company Portal, deploy the [Microsoft Enterprise single sign-on (SSO) plug-in for Apple devices](../identity-platform/apple-sso-plugin.md).
25
+- For a single sign-on (SSO) experience based on the user signed in to the Company Portal app, deployment of the [Microsoft Enterprise SSO plug-in for Apple devices](../identity-platform/apple-sso-plugin.md).
2626
2727
## Download the client
2828
2929
You can download the most current version of the Global Secure Access client from the Microsoft Entra admin center.
3030
3131
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as a [Global Secure Access Administrator](/azure/active-directory/roles/permissions-reference#global-secure-access-administrator).
32
+
3233
1. Browse to **Global Secure Access** > **Connect** > **Client download**.
34
+
3335
1. Select the **macOS** tab.
36
+
3437
1. Select **Download Client**.
35
−:::image type="content" source="media/how-to-install-macos-client/macos-client-download-screen.png" alt-text="Screenshot of the Client download screen. The Download Client button is highlighted.":::
36
−
37
−## Install the Global Secure Access client
38
+
39
+:::image type="content" source="media/how-to-install-macos-client/macos-client-download-screen.png" alt-text="Screenshot of the pane for client downloads. The Download Client button is highlighted.":::
40
+
41
+## Install the client
42
+
3843
### Automated installation
39
−Use the following command for silent installation.
40
−*Substitute your file path according to the download location of the .pkg file.*
4144
45
+Use the following command for silent installation. *Substitute your file path according to the download location of the .pkg file.*
46
+
4247
`sudo installer -pkg ~/Downloads/GlobalSecureAccessClient.pkg -target / -verboseR`
4348
44
−The client uses system extensions and a transparent application proxy that you need to approve during the installation. For a silent deployment without prompting the end user to allow these components, deploy a policy to automatically approve the components by using mobile device management.
49
+The client uses system extensions and a transparent application proxy that you need to approve during the installation. For a silent deployment without prompting the user to allow these components, deploy a policy to automatically approve the components by using mobile device management (MDM).
4550
46
−### Deploy with Microsoft Intune
47
−To deploy the Global Secure Access client .pkg through Microsoft Intune as a managed app:
51
+### Deploy by using Microsoft Intune
4852
49
−1. Download the GlobalSecureAccessClient.pkg file from the Microsoft Entra admin center.
53
+To deploy the Global Secure Access client's .pkg file through Microsoft Intune as a managed app:
54
+
55
+1. Download the `GlobalSecureAccessClient.pkg` file from the Microsoft Entra admin center.
56
+
5057
1. In the [Microsoft Intune admin center](https://intune.microsoft.com), select **Apps** > **All Apps** > **Create**.
51
−1. In the **Select app type** pane, under **Other** app types, select **macOS app (PKG)** and select **Select**.
52
−1. On the **App package file** tab, select **Select app package file**, browse to the GlobalSecureAccessClient.pkg file, and select **OK**.
53
−1. On the **App information** tab, fill in the required details and select **Next**.
54
−1. On the **Requirements** tab, set the minimum operating system to **macOS 14.0** and select **Next**.
55
−1. On the **Detection rules** tab, review the **Included apps** list to verify the Global Secure Access client app is detected correctly and select **Next**.
56
−1. On the **Assignments** tab, assign the app to the appropriate device or user groups and select **Next**.
57
−1. Review the configuration and select **Create**.
5858
59
−### Allow system extensions through mobile device management (MDM)
59
+1. In the **Select app type** pane, under **Other** app types, select **macOS app (PKG)**. Then choose **Select**.
6060
61
+1. On the **App package file** tab, select **Select app package file**. Browse to the `GlobalSecureAccessClient.pkg` file, and then select **OK**.
62
+
63
+1. On the **App information** tab, fill in the required details and then select **Next**.
64
+
65
+1. On the **Requirements** tab, set the minimum operating system to **macOS 14.0** and then select **Next**.
66
+
67
+1. On the **Detection rules** tab, review the **Included apps** list to verify that the Global Secure Access client app is detected correctly. Then select **Next**.
68
+
69
+1. On the **Assignments** tab, assign the app to the appropriate device or user groups. Then select **Next**.
70
+
71
+1. Review the configuration, and then select **Create**.
72
+
73
+### Allow system extensions through mobile device management
74
+
6175
> [!IMPORTANT]
62
−> Previous versions of these instructions referenced the deprecated **Extensions** profile type. If your organization previously deployed system extensions by using the **Extensions** profile, migrate to the **Allowed System Extensions** setting in the **Settings catalog** as described in the following steps.
76
+> Previous versions of these instructions referenced the deprecated **Extensions** profile type. If your organization previously deployed system extensions by using the **Extensions** profile, migrate to the **Allowed System Extensions** setting in **Settings catalog** as described in the following steps.
6377
6478
The following instructions are for [Microsoft Intune](/mem/intune/apps/apps-win32-app-management). You can adapt them for different MDMs.
6579
6680
1. In the Microsoft Intune admin center, select **Devices** > **Manage devices** > **Configuration** > **Policies** > **Create** > **New policy**.
67
−1. Create a profile with a **Platform** of **macOS** and a **Profile type** set to **Settings catalog**. Select **Create**.
68
−:::image type="content" source="media/how-to-install-macos-client/macos-client-create-profile.png" alt-text="Screenshot of the Create a profile form with the macOS Platform and Settings catalog Profile type highlighted.":::
69
−1. On the **Basics** tab, enter a name for the new profile and select **Next**.
81
+
82
+1. Create a profile with **Platform** set to **macOS** and **Profile type** set to **Settings catalog**. Then select **Create**.
83
+
84
+ :::image type="content" source="media/how-to-install-macos-client/macos-client-create-profile.png" alt-text="Screenshot of the form for creating a profile, with the platform and profile type highlighted.":::
85
+
86
+1. On the **Basics** tab, enter a name for the new profile, and then select **Next**.
87
+
7088
1. On the **Configuration settings** tab, select **+ Add settings**.
71
−1. In the **Settings picker**, expand the **System Configuration** category and select **System Extensions**.
72
−1. From the **System Extensions** subcategory, select **Allowed System Extensions**.
73
−:::image type="content" source="media/how-to-install-macos-client/macOS-settings-picker.png" alt-text="Screenshot of the Settings picker with the category and subcategory selections highlighted.":::
74
−1. Close the **Settings picker**.
75
−1. In the list of **Allowed System Extensions**, select **+ Edit instance**.
76
−1. In the **Configure instance** dialog, configure the System Extensions payload settings with the following entries:
7789
90
+1. In **Settings picker**, expand the **System Configuration** category and select **System Extensions**.
91
+
92
+1. In the **System Extensions** subcategory, select **Allowed System Extensions**.
93
+
94
+ :::image type="content" source="media/how-to-install-macos-client/macOS-settings-picker.png" alt-text="Screenshot of the settings picker with the category and subcategory selections highlighted.":::
95
+
96
+1. Close **Settings picker**.
97
+
98
+1. In the **Allowed System Extensions** list, select **+ Edit instance**.
99
+
100
+1. In the **Configure instance** dialog, configure the **System Extensions** payload settings with the following entries:
101
+
78102
|Bundle identifier |Team identifier |
79103
|---------|---------|
80
− |com.microsoft.globalsecureaccess.tunnel |UBF8T346G9 |
81
− |com.microsoft.globalsecureaccess |UBF8T346G9 |
104
+ |`com.microsoft.globalsecureaccess.tunnel` |`UBF8T346G9` |
105
+ |`com.microsoft.globalsecureaccess` |`UBF8T346G9` |
82106
83
−1. Select **Save** and **Next**.
107
+1. Select **Save** > **Next**.
108
+
84109
1. On the **Scope tags** tab, add tags as appropriate.
110
+
85111
1. On the **Assignments** tab, assign the profile to a group of macOS devices or users.
86
−1. On the **Review + create** tab, review the configuration and select **Create**.
87112
88
−### Allow transparent application proxy through MDM
113
+1. On the **Review + create** tab, review the configuration and then select **Create**.
114
+
115
+### Allow a transparent application proxy through MDM
116
+
89117
The following instructions are for [Microsoft Intune](/mem/intune/apps/apps-win32-app-management). You can adapt them for different MDMs.
90118
91119
1. In the Microsoft Intune admin center, select **Devices** > **Manage devices** > **Configuration** > **Policies** > **Create** > **New policy**.
92
−1. Create a profile for the macOS platform based on a template of type **Custom** and select **Create**.
93
−:::image type="content" source="media/how-to-install-macos-client/macos-client-create-profile-custom.png" alt-text="Screenshot of the Create a profile form with the macOS Platform, Templates Profile type, and Custom template highlighted.":::
94
−1. On the **Basics** tab, enter a **Name** for the profile.
95
−1. On the **Configuration settings** tab, enter a **Custom configuration profile name**.
96
−1. Keep **Deployment channel** set to "Device channel."
120
+
121
+1. Create a profile for the macOS platform based on a template of type **Custom**, and then select **Create**.
122
+
123
+ :::image type="content" source="media/how-to-install-macos-client/macos-client-create-profile-custom.png" alt-text="Screenshot of the form for creating a profile with the platform, profile type, and template type highlighted.":::
124
+
125
+1. On the **Basics** tab, enter a **Name** value for the profile.
126
+
127
+1. On the **Configuration settings** tab, enter a **Custom configuration profile name** value.
128
+
129
+1. Keep **Deployment channel** set to **Device channel**.
130
+
97131
1. Upload an .xml file that contains the following data:
98132
99133
```xml
⋯ 67 unchanged lines
167201
168202
1. Complete the creation of the profile by assigning users and devices according to your needs.
169203
170
−### Manual interactive installation
171
−To manually install the Global Secure Access client:
172
−1. Run the `GlobalSecureAccessClient.pkg` setup file. The **Install** wizard launches. Follow the prompts.
173
−1. On the **Introduction** step, select **Continue**.
174
−1. On the **License** step, select **Continue** and then select **Agree** to accept the license agreement.
175
−:::image type="content" source="media/how-to-install-macos-client/macos-install-license-agreement.png" alt-text="Screenshot of the Install wizard on the SumLicense step, showing the software license agreement pop-up.":::
176
−1. On the **Installation** step, select **Install**.
177
−1. On the **Summary** step, when the installation is complete, select **Close**.
178
−1. Allow the Global Secure Access system extension.
179
− 1. In the **System Extension Blocked** dialog, select **Open System Settings**.
180
− :::image type="content" source="media/how-to-install-macos-client/macos-client-open-system-settings.png" alt-text="Screenshot of the System Extension Blocked dialog box with the Open System Settings highlighted.":::
204
+### Manually install the client
181205
182
− 1. Allow the Global Secure Access client system extension by selecting **Allow**.
183
− :::image type="content" source="media/how-to-install-macos-client/macos-allow-blocked-application.png" alt-text="Screenshot of the System Settings, open to the Privacy & Security options, showing a blocked application message, with the Allow button highlighted.":::
206
+1. Run the `GlobalSecureAccessClient.pkg` setup file. The **Install** wizard starts. Follow the prompts.
184207
185
− 1. In the **Privacy & Security** dialog, enter your username and password to validate the approval of the system extension. Then select **Modify Settings**.
186
− :::image type="content" source="media/how-to-install-macos-client/macos-client-credentials.png" alt-text="Screenshot of the Privacy & Security pop-up requesting sign-in credentials and the Modify Settings button highlighted.":::
208
+1. In the **Introduction** step, select **Continue**.
187209
188
− 1. Complete the process by selecting **Allow** to enable the Global Secure Access client to add proxy configurations.
189
− :::image type="content" source="media/how-to-install-macos-client/macos-add-proxy.png" alt-text="Screenshot of the Global Secure Access client would like to add proxy configurations pop-up with the Allow button highlighted.":::
190
−
210
+1. In the **License** step, select **Continue**, and then select **Agree** to accept the license agreement.
211
+
212
+ :::image type="content" source="media/how-to-install-macos-client/macos-install-license-agreement.png" alt-text="Screenshot of the License step of the Install wizard, showing the software license agreement dialog.":::
213
+
214
+1. In the **Installation** step, select **Install**.
215
+
216
+1. In the **Summary** step, when the installation is complete, select **Close**.
217
+
218
+1. Allow the Global Secure Access system extension:
219
+
220
+ 1. In the **System Extension Blocked** dialog, select **Open System Settings**.
221
+
222
+ :::image type="content" source="media/how-to-install-macos-client/macos-client-open-system-settings.png" alt-text="Screenshot of the System Extension Blocked dialog with Open System Settings highlighted.":::
223
+
224
+ 1. Allow the Global Secure Access client's system extension by selecting **Allow**.
225
+
226
+ :::image type="content" source="media/how-to-install-macos-client/macos-allow-blocked-application.png" alt-text="Screenshot of the system settings, open to the options for privacy and security, showing a blocked application message with the Allow button highlighted.":::
227
+
228
+ 1. In the **Privacy & Security** dialog, enter your username and password to validate the approval of the system extension. Then select **Modify Settings**.
229
+
230
+ :::image type="content" source="media/how-to-install-macos-client/macos-client-credentials.png" alt-text="Screenshot of the Privacy & Security dialog requesting sign-in credentials, with the Modify Settings button highlighted.":::
231
+
232
+ 1. Complete the process by selecting **Allow** to enable the Global Secure Access client to add proxy configurations.
233
+
234
+ :::image type="content" source="media/how-to-install-macos-client/macos-add-proxy.png" alt-text="Screenshot of the dialog that says the Global Secure Access client would like to add proxy configurations, with the Allow button highlighted.":::
235
+
191236
1. After the installation is complete, you might be prompted to sign in to Microsoft Entra.
237
+
192238
> [!NOTE]
193
− > If the [Microsoft Enterprise SSO plug-in for Apple devices](../identity-platform/apple-sso-plugin.md) is deployed, the default behavior is to use single sign-on with the credentials entered in the company portal.
239
+ > If the [Microsoft Enterprise SSO plug-in for Apple devices](../identity-platform/apple-sso-plugin.md) is deployed, the default behavior is to use SSO with the credentials entered in the Company Portal app.
194240
195
−1. The **Global Secure Access - Connected** icon appears in the system tray, indicating a successful connection to Global Secure Access.
196
−:::image type="content" source="media/how-to-install-macos-client/macos-client-system-tray-icon-connected.png" alt-text="Screenshot of the system tray with the Global Secure Access - Connected icon highlighted.":::
197
−
198
−## Upgrade the Global Secure Access client
241
+1. Verify that the **Global Secure Access - Connected** icon appears in the system tray. It indicates a successful connection to Global Secure Access.
242
+
243
+ :::image type="content" source="media/how-to-install-macos-client/macos-client-system-tray-icon-connected.png" alt-text="Screenshot of the system tray with the icon for connectivity to Global Secure Access highlighted.":::
244
+
245
+## Upgrade the client
246
+
199247
The client installer supports upgrades. You can use the installation wizard to install a new version on a device that's currently running a previous client version.
200248
201
−For a silent upgrade, run the following command.
202
−*Substitute your file path according to the download location of the .pkg file.*
249
+For a silent upgrade, run the following command. *Substitute your file path according to the download location of the .pkg file.*
203250
204251
`sudo installer -pkg ~/Downloads/GlobalSecureAccessClient.pkg -target / -verboseR`
205252
206
−## Uninstall the Global Secure Access client
207
−To manually uninstall the Global Secure Access client, use either of the following methods:
208
−- Run the **Uninstall Global Secure Access Client** application.
209
−
210
−Or
253
+## Uninstall the client
211254
212
−- Run the following command:
255
+To manually uninstall the Global Secure Access client, use either of the following methods:
213256
214
−`sudo /Applications/GlobalSecureAccessClient/Global\ Secure\ Access\ Client.app/Contents/Resources/install_scripts/uninstall`
257
+- Run the **Uninstall Global Secure Access Client** application.
258
+- Run the following command: `sudo /Applications/GlobalSecureAccessClient/Global\ Secure\ Access\ Client.app/Contents/Resources/install_scripts/uninstall`.
215259
216260
If you're using an MDM, uninstall the client with the MDM.
217261
218262
## Client actions
219
−To view the available client menu actions, right-click the Global Secure Access system tray icon.
220
−:::image type="content" source="media/how-to-install-macos-client/macos-client-actions.png" alt-text="Screenshot showing the list of Global Secure Access client actions.":::
221263
264
+To view the available client menu actions, right-click the Global Secure Access icon in the system tray.
265
+
266
+:::image type="content" source="media/how-to-install-macos-client/macos-client-actions.png" alt-text="Screenshot that shows the list of Global Secure Access client actions.":::
267
+
222268
|Action |Description |
223269
|---------|---------|
224270
|**Disable** |Disables the client until you enable it again. When you disable the client, you're prompted to enter a business justification and reenter your sign-in credentials. The business justification is logged. |
⋯ 1 unchanged line
226272
|**Pause** |Pauses the client for either 10 minutes, until you resume the client, or until the device is restarted. When you pause the client, you're prompted to enter a business justification and reenter your sign-in credentials. The business justification is logged. |
227273
|**Resume** |Resumes the paused client. |
228274
|**Restart** |Restarts the client. |
229
−|**Collect logs** |Collects client logs and archives them in a zip file to share with Microsoft Support for investigation. |
230
−|**Settings** |Opens the Settings and Advanced diagnostics tool. |
231
−|**About** |Shows information regarding the product's version. |
232
−
275
+|**Collect logs** |Collects client logs and archives them in a .zip file to share with Microsoft Support for investigation. |
276
+|**Settings** |Opens the **Settings and Advanced diagnostics** tool. |
277
+|**About** |Shows information about the product's version. |
233278
234
−### Client statuses in system tray icon
279
+### Client statuses in the system tray
235280
236281
|Icon |Message |Description |
237282
|---------|---------|---------|
⋯ 1 unchanged line
239284
|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-connected.png"::: |Global Secure Access Client - Connected |The client is connected to Global Secure Access. |
240285
|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-disabled.png"::: |Global Secure Access Client - Disabled |The client is disabled because services are offline or you disabled the client. |
241286
|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-disconnected.png"::: |Global Secure Access Client - Disconnected |The client failed to connect to Global Secure Access. |
242
−|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-warning.png"::: |Global Secure Access Client - Some channels are unreachable |The client is partially connected to Global Secure Access (that is, the connection to at least one channel failed: Microsoft Entra, Microsoft 365, Private Access, Internet Access). |
243
−|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-warning.png"::: |Global Secure Access Client - Disabled by your organization |Your organization disabled the client (that is, all traffic forwarding profiles are disabled). |
287
+|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-warning.png"::: |Global Secure Access Client - Some channels are unreachable |The client is partially connected to Global Secure Access. That is, the connection to at least one channel failed: Microsoft Entra, Microsoft 365, Private Access, Internet Access. |
288
+|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-warning.png"::: |Global Secure Access Client - Disabled by your organization |Your organization disabled the client. That is, all traffic forwarding profiles are disabled. |
244289
|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-warning.png"::: |Global Secure Access - Private Access is disabled |You disabled Private Access on this device. |
245
−|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-warning.png"::: |Global Secure Access - could not connect to the Internet |The client couldn't detect an internet connection. The device is either connected to a network that doesn't have an Internet connection or a network that requires captive portal sign in. |
290
+|:::image type="icon" source="media/how-to-install-macos-client/global-secure-access-client-icon-warning.png"::: |Global Secure Access - could not connect to the Internet |The client couldn't detect an internet connection. The device is either connected to a network that doesn't have an internet connection or connected to a network that requires captive portal sign-in. |
246291
247292
## Settings and troubleshooting
248
−From the **Settings** window, you can set different configurations and perform some advanced actions.
249
−The **Settings** window has two tabs:
250293
251
−### Settings
294
+In the **Settings** window, you can set configurations and perform some advanced actions. The **Settings** window has two tabs.
252295
296
+### Settings tab
297
+
253298
|Option |Description |
254299
|---------|---------|
255300
|**Telemetry full diagnostics** |Sends full telemetry data to Microsoft for application improvement. |
256
−|**Enable Verbose Logging** |Enables verbose logging and network capture to be collected when exporting the logs to a zip file. |
301
+|**Enable Verbose Logging** |Enables verbose logging and network capture to be collected when you're exporting the logs to a .zip file. |
257302
258
−:::image type="content" source="media/how-to-install-macos-client/macos-client-settings-toggles.png" alt-text="Screenshot of the macOS Settings and Troubleshooting view, with the Settings tab selected.":::
303
+:::image type="content" source="media/how-to-install-macos-client/macos-client-settings-toggles.png" alt-text="Screenshot of the macOS Settings tab.":::
259304
260
−### Troubleshooting
305
+### Troubleshooting tab
261306
262307
|Action |Description |
263308
|---------|---------|
264309
|**Get Latest Policy** |Downloads and applies the latest forwarding profile for your organization. |
265310
|**Clear cached data** |Deletes the client's internal cached data related to authentication, forwarding profile, FQDNs, and IPs. |
266
−|**Export Logs** |Exports logs and configuration files related to the client to a zip file. |
267
−|**Advanced Diagnostics Tool** |An advanced tool to monitor and troubleshoot the client's behavior. |
311
+|**Export Logs** |Exports logs and configuration files related to the client to a .zip file. |
312
+|**Advanced Diagnostics Tool** |Opens an advanced tool to monitor and troubleshoot the client's behavior. |
268313
269
−:::image type="content" source="media/how-to-install-macos-client/macos-client-troubleshooting-toggles.png" alt-text="Screenshot of the macOS Settings and Troubleshooting view, with the Troubleshooting tab selected.":::
314
+:::image type="content" source="media/how-to-install-macos-client/macos-client-troubleshooting-toggles.png" alt-text="Screenshot of the macOS Troubleshooting tab.":::
270315
271
−### Hide or unhide system tray menu buttons
272
−The administrator can show or hide specific buttons in the client system tray icon menu by deploying the values in the following table.
316
+### Hide or unhide menu buttons in the system tray
273317
318
+The administrator can show or hide specific buttons on the icon menu in the client's system tray by deploying the values in the following table.
319
+
274320
|Value |Type |Data |Default behavior |Description |
275321
|------|------|------|------|------|
276
−|HideDisablePrivateAccessButton |Boolean |false = shown true = hidden |hidden |Set this value to show or hide the **Disable Private Access** button. This option is for a scenario when the device is directly connected to the corporate network and the user prefers to access private applications directly through the network instead of through Global Secure Access. |
277
−|HideDisableButton |Boolean |false = shown true = hidden |shown |Set this value to show or hide the **Disable** action. When visible, the user can disable the Global Secure Access client. The client stays disabled until the user enables it again or restarts the device. |
278
−|HidePauseButton |Boolean |false = shown true = hidden |shown |Set this value to show or hide the **Pause** action. When visible, the user can pause the Global Secure Access client. The client pauses for 10 minutes or until the user enables it again. |
279
−|HideQuitButton |Boolean |false = shown true = hidden |hidden |Set this value to show or hide the **Quit** action. When visible, the user can quit the Global Secure Access client, which closes the client application. To open it again, run the Global Secure Access application from Finder. |
322
+|`HideDisablePrivateAccessButton` |Boolean |`false` = shown `true` = hidden |Hidden |Set this value to show or hide the **Disable Private Access** button. This option is for a scenario when the device is directly connected to the corporate network and the user prefers to access private applications directly through the network instead of through Global Secure Access. |
323
+|`HideDisableButton` |Boolean |`false` = shown `true` = hidden |Shown |Set this value to show or hide the **Disable** action. When the action is visible, the user can disable the Global Secure Access client. The client stays disabled until the user enables it again or restarts the device. |
324
+|`HidePauseButton` |Boolean |`false` = shown `true` = hidden |Shown |Set this value to show or hide the **Pause** action. When the action is visible, the user can pause the Global Secure Access client. The client pauses for 10 minutes or until the user enables it again. |
325
+|`HideQuitButton` |Boolean |`false` = shown `true` = hidden |Hidden |Set this value to show or hide the **Quit** action. When the action is visible, the user can quit the Global Secure Access client, which closes the client application. To open it again, run the Global Secure Access application from Finder. |
280326
281
−You can also configure the client system tray icon menu with Microsoft Intune:
282
−1. Follow the instructions to [Create the profile](/intune/intune-service/configuration/preference-file-settings-macos#create-the-profile).
327
+You can also configure the icon menu in the client's system tray by using Microsoft Intune:
328
+
329
+1. Follow the instructions to [create the profile](/intune/intune-service/configuration/preference-file-settings-macos#create-the-profile).
330
+
283331
1. For **Preference domain name**, enter `com.microsoft.globalsecureaccess`.
332
+
284333
1. For **Property list file**, upload an XML file similar to the following sample. Revise the XML to match your preferences.
285334
286
−```xml
287
−<key>HidePauseButton</key>
288
−<false/>
289
−<key>HideDisableButton</key>
290
−<false/>
291
−<key>HideQuitButton</key>
292
−<true/>
293
−<key>HideDisablePrivateAccessButton</key>
294
−<true/>
295
−```
335
+ ```xml
336
+ <key>HidePauseButton</key>
337
+ <false/>
338
+ <key>HideDisableButton</key>
339
+ <false/>
340
+ <key>HideQuitButton</key>
341
+ <true/>
342
+ <key>HideDisablePrivateAccessButton</key>
343
+ <true/>
344
+ ```
296345
297
−:::image type="content" source="media/how-to-install-macos-client/intune-xml-sample.png" alt-text="Screenshot of the Microsoft Intune admin center, on the Configurations step, showing sample XML code.":::
346
+:::image type="content" source="media/how-to-install-macos-client/intune-xml-sample.png" alt-text="Screenshot of the configuration step in the Microsoft Intune admin center, showing sample XML code.":::
298347
299348
## Known limitations
300349
301350
[!INCLUDE [known-limitations-include](../includes/known-limitations-include.md)]
302351
303352
## Related content
304
−- [Global Secure Access client for Microsoft Windows](how-to-install-windows-client.md)
305
−- [Global Secure Access client for iOS](how-to-install-ios-client.md)
306
−- [Global Secure Access client for Android](how-to-install-android-client.md)
353
+
354
+- [Install the Global Secure Access client for Windows](how-to-install-windows-client.md)
355
+- [Install the Global Secure Access client for iOS](how-to-install-ios-client.md)
356
+- [Install the Global Secure Access client for Android](how-to-install-android-client.md)
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:13 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.