I have a custom MDM config profile being pushed for pre-approving extensions for our EDR solution (dynamic group where OS = MacOS). I use a command to install the EDR agent. The command runs automatically ("After Agent Install" command type in JC) to ensure the EDR agent is deployed during user enrollment (onboarding).
Both work great, but I need to confirm the order in which these run and I'm having problems locating any documentation.
Can anyone tell me what order these are deployed during automated enrollment for a device? Meaning, once the JC agent is installed on the MacBook (via Apple ABM integration), I would like to know if the custom JC MDM config policy is deployed PRIOR to the command being run, or vice-versa.
The reason I'm asking is because the MDM policy needs to be deployed prior to the command to install the EDR agent since the pre-approval of extensions needs to happen first.
