05/25/2022, 5:26 PM
1. Are you trying to validate whether osquery has FDA? 2. Are you trying to debug whether it came in via the MDM? For (1) just try reading something. Either you get results or you don’t. If your issue is that reading when you don’t have permission results in no results, then write different SQL. For (2) I don’t offhand remember the various data sources, and whether you need FDA to read them or not. If you need FDA to read them, then I don’t know how to confirm the MDM settings for FDA. without already having FDA.