Allowednonadminpackagefamilynamerules: [exclusive]

sudo defaults write /Library/Preferences/com.apple.installer allowednonadminpackagefamilynamerules -array "com.microsoft.*" "com.google.*"

: If an app's family name is on this list, a standard user can install it even if the general block-policy is active. allowednonadminpackagefamilynamerules

: It allows you to specify a whitelist of "Package Family Names". sudo defaults write /Library/Preferences/com