Symptoms
You receive the following message in Microsoft Defender for Endpoint on your Mac:
Action needed
Cause
Apple requires that all new system extensions being installed from third-party developers in macOS be manually allowed.
Resolution
1) Click Action needed.
2) In the bottom left-hand corner, click the lock icon.
3) Authenticate using Touch ID or the username and password of an administrator on your Mac.
4) In the left-hand pane, ensure that Full Disk Access is chosen. Then, check the boxes next to the following:
- Microsoft Defender ATP.app
- Microsoft Defender ATP Endpoint Security Extension
5) Close System Preferences.
Outcome
Microsoft Defender for Endpoint will function as expected on your Mac.