Full Disk Access is one of the broadest permissions on a Mac. An app that has it can reach files from other apps, including Mail, Messages, Safari and Time Machine backups. That is useful for backup tools. It is also more access than most day-to-day apps need.
Apple has said it will make that grant harder to give by accident. Researchers later reported early code in a macOS 27.3 beta that may be part of that plan. Those two threads are not the same thing. One is confirmed by Apple. The other is still reported beta behavior.
What Apple has confirmed
On October 2, 2026, Apple published Updates to Full Disk Access in macOS on Apple Developer News.
Apple wrote that Full Disk Access largely sidesteps the Mac's normal privacy controls so backup apps can work. It also said some developers are using that access in ways that could put users at risk, exposing files, mail, messages and browsing history without users' full knowledge. For communication apps, Apple added, that can also affect the privacy of the people users are talking to.
Going forward, Apple said it will introduce additional controls so that users who genuinely want to grant this level of access can only do so with "very explicit user action." Apple named AI agents as a reason the risk is growing: as agents become more capable and autonomous, the company said, the risks of this access grow substantially.
That is the confirmed part. Apple did not name a macOS version, a release date or the technical steps the new controls will use.
What researchers have reported about macOS 27.3
Separately, on November 7, 2026, researcher pdfu reported findings from the macOS 27.3 beta on pdfu.dev and on X. 9to5Mac and iThinkDiff covered the same report on November 8.
Here is what that reporting describes. Treat it as reported beta behavior, not as an Apple announcement:
- The first macOS 27.3 beta includes a feature flag named TCC/FDA_WARNING. The flag is off in beta 1.
- Today, when an app tries to read a protected file without Full Disk Access, macOS denies the read and records that denial. Because of that record, the app shows up under Privacy & Security → Full Disk Access with its switch off, and many apps then tell you to flip it.
- With the flag on, those automatic denials are no longer saved. A blocked app would not appear on the list by itself. You would add it with the + button or by dragging it in from Applications.
- The flag does not add a warning dialog yet in the reporting reviewed for this article.
- The same beta also introduces Private Folders, described as a folder-by-folder permission set up like Full Disk Access. It is not fully wired up yet. The reporting says the flag would also stop automatic Private Folders denials from being saved.
Apple has not confirmed that this flag is the final form of the "very explicit user action" it described on October 2. Features found behind flags can change or be dropped before release.
What this means for a small office
You do not need to be on a beta to benefit from a cleaner Full Disk Access list. A small office often has backup software, remote-support tools, antivirus, agent apps and one-off utilities that asked for broad access months ago. Some of those still need it. Some do not.
Updating to macOS 27.2 is a separate step from anything reported about 27.3. The reported flag sits in the 27.3 beta, not in the 27.2 update path described in the coverage reviewed here.
The reporting reviewed for this article does not say Apple will revoke grants you already approved. The practical rule if something stops working after a later 27.3 update is simple: open the Full Disk Access list and add the app again by hand if you still trust it and still need that access.
Audit the list this week
On current macOS, Apple documents the path as:
Apple menu → System Settings → Privacy & Security → Full Disk Access
(Apple Support: Change Privacy & Security settings on Mac)
For each app on the list, ask:
- Do we still use this? If not, turn it off or remove it.
- Does the vendor document why Full Disk Access is required? Backup and some security tools often do. Many other apps do not.
- Would Files & Folders access be enough? Apple's Privacy & Security settings also include a narrower Files & Folders permission. Prefer that when the app's job only needs specific folders.
- Who approved it? For a shared office Mac, write down who granted Full Disk Access and why.
If you manage Macs with MDM, wait for Apple's published documentation before changing policy. Beta flag behavior is not a rollout plan.
One useful job for Monday
Open Full Disk Access on each office Mac. Remove anything you no longer recognize or no longer use. For any AI agent, remote-support tool or new utility that asks for Full Disk Access, ask what folder it actually needs and whether Files & Folders will do. Grant the broadest permission last, not first.
For more small-office checks, start with AWHIND's free security checklist.
Sources
- Apple Developer News: Updates to Full Disk Access in macOS — confirmed Apple statement, October 2, 2026. No version, date or technical mechanism named.
- pdfu: macOS 27.3 starts implementing changes to Full Disk Access — reported beta findings, November 7, 2026, including the TCC/FDA_WARNING flag and Private Folders notes.
- 9to5Mac: macOS 27.3 could change how you grant AI agents Full Disk Access — November 8, 2026 coverage of pdfu's report.
- iThinkDiff: macOS 27.3 Beta Flag Stops Apps Adding Themselves to Full Disk Access — November 8, 2026 coverage of the same reported flag behavior.
- Apple Support: Change Privacy & Security settings on Mac — documents the System Settings → Privacy & Security → Full Disk Access path and the separate Files & Folders permission.