Apple plans clearer macOS Full Disk Access consent as AI agents gain reach

Apple plans to make granting macOS Full Disk Access require more explicit user action, citing the growing reach of AI agents. Its developer notice of October 2, 2026 announces an intention, with no named release or delivery date. Mac users can review existing permissions today; the notice does not establish that a new consent screen has shipped.

One permission can reach beyond the intended task

Apple's Mac User Guide describes Full Disk Access as covering files across the computer, other apps' data and Time Machine backups. Files & Folders is a separate permission category. That distinction matters when an assistant needs one working folder but asks for a much broader grant.

Apple also warns that access to communication apps can affect the people the user communicates with. Consent therefore has two audiences: the person installing the app and the contacts whose information may be included in its work. An agent's usefulness for one task is not, by itself, an explanation for needing that wider material.

Review the grant against the actual workflow

The existing route is System Settings → Privacy & Security → Full Disk Access, as documented in Apple's guide. Review which apps have access and ask what each needs to read. A backup application and an assistant summarizing a selected document have different jobs; assess their permissions against those jobs rather than the appeal of an autonomous feature.

For a new agent, ask the developer whether a narrower permission or selected-folder workflow is supported. If access is removed from an app already in use, check the relevant workflow afterward, especially a backup or restore task. This is a practical review of a current grant, not a promise that every app can work with less access.

Full Disk Access is also distinct from the Accessibility and Automation permissions listed in the same settings guide. Reading protected files and controlling another app are separate questions. An approval prompt for an agent's action does not, on its own, explain the files it can already read.

The implementation will decide the friction

Apple says the broad permission helps backup apps function and plans additional consent controls as agents become more capable. Its platform security guide provides the wider context for protected file access, but neither guide supplies the unannounced interface.

TechKili's assessment is that the useful test for the eventual change is whether a user understands the scope before granting it while legitimate workflows remain workable. Developers should be ready to explain the need clearly. Until Apple publishes implementation details, claims about an agent ban, a specific extra prompt or a release deadline go beyond the announcement.