Yes I think the profile is the way to go, we already use JAMF as our MDM so I will work on that to deploy and grant access. At first I thought that installation packages could have a kind of "permissions manifest" to grant TTC at install-time but it seems it's not the case. Also, it seems like FDA does not prompt user, contrary to video permissions for example...