Agent skill · software engineering · jeremylongshore
apple-notes-enterprise-rbac
Implement access control for multi-user Apple Notes automation.
Why this skill is useful
Adds specific automation scripts for managing Apple Notes access control that are not commonly known.
What it needs
Requires grep, osascript installed locally. About 3k tokens when loaded. Last updated 2026-08-07. 2,604 stars on the source repository.
What this skill does
Apple Notes Enterprise RBAC Overview Apple Notes has no built-in role-based access control (RBAC). In enterprise environments with Managed Apple IDs via Apple Business Manager, administrators control Notes access through MDM (Mobile Device Management) profiles. For multi-user automation scenarios, implement access control at the automation layer using account separation, folder-based permissions, and shared folder restrictions. iCloud Shared Notes (macOS Ventura+) provide basic collaboration, but fine-grained permissions (read-only vs edit) must be enforced in your wrapper code. Prerequisites An identity source, role owner, approval workflow, and audit retention policy external to Notes.app. A reviewed allowlist mapping stable automation identities to explicitly configured account/folder scopes. MDM and legal/security approval for managed-device controls; folder conventions alone are not an authorization boundary. Instructions 1. Authenticate and authorize every automation action before invoking JXA, default-deny unknown roles, accounts, folders, and operations. 2. Use stable configuration identifiers rather than account or folder names in telemetry; store mappings in a protected configuration service. 3. Apply least privilege: separate read, write, delete, and export approvals, and require elevated review for destructive operations. 4. Audit authorization decisions and periodically test revocation; TCC consent does not replace application authorization. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills jeremylongshore/apple-notes-enterprise-rbac