What command gives you the ability to set, change, and reset privacy permissions for a single app or all apps?

The tccutil command is the designated command-line utility in macOS for managing the privacy database. This database is part of Apple's Transparency, Consent, and Control (TCC) framework, which governs application access to sensitive user data and system resources like the camera, microphone, contacts, and location services. The primary function of tccutil is to reset these privacy decisions, allowing an administrator to revoke permissions for a specific service (e.g., Photos) or for a particular application across all services. This directly addresses the need to set, change, and reset privacy permissions as described in the question.

B. dscl: This is the Directory Service command-line utility, used for managing user accounts, groups, and other directory service data, not application privacy settings.
C. ifconfig: This is a standard UNIX utility for configuring network interface parameters. It has no function related to application permissions or system privacy.
D. Sysadminctl: This utility is used for system administration tasks related to user accounts, such as creating users or resetting passwords, not for managing TCC permissions.

1. Apple Unified Logging and Activity Tracing Documentation: The tccutil command is documented in the macOS manual pages. The description explicitly states its purpose: "tccutil -- Manage the privacy database."

Source: tccutil(1) macOS Manual Page. Accessible via the Terminal app on any Mac by typing man tccutil.

2. Apple Platform Security Guide: This guide details the TCC framework that tccutil manages. It explains how TCC protects user data by requiring app-specific consent before granting access to protected resources.

Source: Apple Platform Security, "Transparency, Consent, and Control (TCC)," May 2024. Section: "App security," Subsection: "Access to protected resources."

3. macOS Command-Line Documentation: The manual pages for the incorrect options confirm their distinct purposes.

Source: dscl(1) macOS Manual Page. Description: "Directory Service command line utility."

Source: ifconfig(8) macOS Manual Page. Description: "configure network interface parameters."

Source: sysadminctl(8) macOS Manual Page. Description: "System administration utility."