AI agents: see /llms.txt for a full index of this site, or /llms-full.txt for concatenated documentation.

Workshop Docs

Enterprise control plane for Santa. Manage rules, approvals, telemetry, and policies across your macOS fleet.

Workshop Docs
View chapters on this page

Rules

Workshop provides comprehensive rule management for controlling system behavior across your organization. Rules define policies for both execution control and file access authorization.

Rule Categories

Execution Rules

Control which binaries can execute on your systems. Execution rules use Santa’s binary authorization capabilities to allow or block applications based on cryptographic signatures, certificates, and other identifiers.

Learn more about Execution Rules →

File Access Rules

Regulate which processes can read and write files on macOS systems. File Access rules provide fine-grained control over file system access, enabling monitoring, logging, and blocking of access attempts.

Learn more about File Access Rules →