I agree as well with @Afogh @DTS Engineer - In addition, even if one adds a "bare" executable FDA by dragging it in from Finder, how can one remove this permission without clearing the whole FDA section (tccutil reset SystemPolicyAllFiles)? Removing it via bundle ID is not possible: sudo tccutil reset kTCCServiceSystemPolicyAllFiles com.apple.sshd-keygen-wrapper tccutil: No such bundle identifier "com.apple.sshd-keygen-wrapper": The operation couldn’t be completed. (OSStatus error -10814.)

INMHO it's the same issue, i.e. FDA permissions whether granted manually via dragging the binary from Finder or via MDM are not reflected within the System Setting's UI. As noted by @Afogh the permissions are actually set within the TCC.db.