A quick way to check if BigFix has been granted FDA on macOS systems:
exists folders of folders "/Library/Mail" of folders of folder "/Users/"
The contents of ~/Library/Mail are protected by FDA, so the analysis returns True if BESAgent can read the folders (has FDA), and False if it cannot (does not have FDA). So far it's been reliable in my testing, even on devices where mail was never set up.