A user will need to manually grant Konea and KSchedulerConsole full disk access in System->Security and Privacy preferences. We are unable to set these automatically due to security restrictions, and the only way to avoid doing this manually is if the Mac is managed by Apple MDM and they configure through PrivacyPreferencesPolicyControl. Without either configuring manually or via MDM, the Mac will get permission not permitted error when trying to replicate to the share.
See this Apple support article for more information if you have MDM managed Macs:
https://support.apple.com/guide/mdm/privacy-preferences-policy-control-payload-mdm38df53c2a/web
1. Open System Preferences->Security and Privacy, and select the Privacy tab and Full Disk Access in left pane. Click the lock to unlock the settings.
2. Click +, browse to /Library/Application Support/Quest/KACE/bin and select konea and KSchedulerConsole. Click Open.
3. Verify that konea and KSchedulerConsole are checked in the list.
