macOS imposes privacy restrictions that disallow, by default, access to certain application data (e.g. Mail, Messages, Safari, Photos), and all access to any external hard drives and network volumes.
macOS does not conveniently ask you to grant access to an application when that application tries to access that data. Instead, you're required to manually pre-approve the application. As a result, when you download an application specifically to back up your most precious data, that application can't back up that data until you specifically go out of your way to grant it access to that data.
To proactively grant CCC and its helper tool full disk access, choose "Grant CCC Full Disk Access..." from the Carbon Copy Cloner menu.
CCC's Install Assistant, indicated in the screenshot above, will guide you through the pre-approval procedure that grants CCC and its helper tool full disk access. To begin, click the button to open the Security & Privacy Preference Pane in the System Preferences application. CCC will take you directly to the Privacy tab and select the Full Disk Access category. Next, click the padlock icon in the lower-left corner of the Privacy window to allow changes. Next, drag the fish icon from CCC's Install Assistant onto the table in the Privacy window. This icon represents two separate files on your Mac — the Carbon Copy Cloner application and its privileged helper tool, so when you drop this onto the Privacy table, you will see both "Carbon Copy Cloner.app" and "com.bombich.ccchelper" appear in that table. Once you have granted CCC's helper tool full disk access, CCC will dismiss its Install Assistant and resume whatever task led up to the presentation of the Install Assistant. You can close the System Preferences window at that point, and if you're prompted to quit CCC now or later, you can choose the "Later" option.
It seems intuitive to add the Carbon Copy Cloner application to the Full Disk Access list. Unfortunately, Apple's Privacy measures don't work in an intuitive manner when an application leverages a privileged helper tool. Following Apple's Best Practices for performing tasks with elevated privileges (e.g. backing up your startup disk), CCC leverages a privileged helper tool for managing all aspects of your backup task. Therefore, it is CCC's privileged helper tool ("com.bombich.ccchelper") that needs Full Disk Access, not the main application. After adding granting full disk access to CCC and its helper tool, the Full Disk Access table should look like this:
If accessibility challenges make the drag and drop procedure too difficult, you can follow the steps below to grant full disk access to CCC's privileged helper tool.
- Open the Security & Privacy Preference Pane in the System Preferences application
- Click on the Privacy tab
- Click the padlock in the lower-left corner to allow changes
- Click on Full Disk Access in the categories table
- Click the + button
- Navigate to the root-level of your startup disk (e.g. Macintosh HD) > Library > PrivilegedHelperTools
- Select com.bombich.ccchelper
- Click the Open button