These are the known issues in this version of Puppet.
User and group management on macOS 10.14 requires Full Disk Access
To manage users and groups with Puppet on macOS 10.14, you must grant Puppet Full Disk Access (FDA). You must also grant FDA to the parent process that triggers your Puppet run. For example:
To run Puppet in a master-agent infrastructure, you must grant FDA to the
pxp-agent.To run Puppet from a remote machine with SSH commands, you must grant FDA to
sshd.To run Puppet commands from the terminal, you must grant FDA to
terminal.app.
To give Puppet access on a machine running macOS10.14, go to System Preferences > Security & Privacy > Privacy > Full Disk Access, and add the path to the Puppet executable, along with any other parent processes you use to run. Alternatively, set up automatic access using Privacy Preferences Control Profiles and a Mobile Device Management Server. PA-2226, PA-2227