Use this payload to specify which iOS device features users can use.
Functionality
Note: Use the iOS restrictions payload for iOS device, user, and user group configuration profiles. For more information, see About profiles and payloads and Payload best practices.
Setting | Description |
|---|---|
Allow use of camera | When this option is off, cameras are disabled and the Camera icon is removed from the Home screen. Users can’t take photographs or videos, or use FaceTime. |
Allow FaceTime | When this option is off, users can’t place or receive FaceTime audio or video calls. |
Allow screenshots | When this option is off, users can’t save a screenshot of the display. |
Allow AirDrop (Supervised only) | When this option is off, users can’t use AirDrop with any apps. |
Allow iMessage (Supervised only) | When this option is off, users can’t send or receive messages using iMessage. If the device supports text messaging, the user can still send and receive text messages. If your device doesn’t support text messaging, the Messages icon is removed from the Home screen. |
Allow voice dialing | When this option is off, users can’t dial a phone number using voice commands. |
Allow Siri | When this option is off, Siri can’t be used. |
Allow Siri while device locked | When this option is off, Siri only responds when the device is unlocked. |
Enable Siri profanity filter (Supervised only) | When this option is off, the profanity filter in Siri isn’t enabled. The default is On. |
Allow user-generated content in Siri (Supervised only) | When this option is off, Siri can’t obtain content from sources that allow user-generated content, such as Wikipedia. |
Allow iBooks Store (Supervised only) | When this option is off, the iBooks Store is disabled, and users can’t access it from the iBooks app. |
Allow podcasts (Supervised only) | When this option is off, users can’t download Podcasts. |
Allow installing apps | When this option is off, App Store is disabled and its icon is removed from the Home screen. Users can’t install or update apps from the App Store using App Store, iTunes, or MDM. In-house apps can still be installed and updated. |
Allow removing apps (Supervised only) | When this option is off, users can’t remove installed apps. |
Allow In-App Purchase | When this option is off, users can’t make in-app purchases. |
Require iTunes password for all purchases | When this option is off, iTunes in-app purchases and iTunes purchases don’t prompt for the account password. The default is On. |
Allow iCloud backup | When this option is off, device backup is only performed in iTunes. |
Allow iCloud documents and data | When this option is off, documents and data aren’t added to iCloud. |
Allow iCloud keychain | When this option is off, iCloud Keychain isn’t used. |
Allow managed apps to store data in iCloud | When this option is off, users can’t store data from managed apps in iCloud. |
Allow backup of enterprise books | When this option is off, users can’t back up books distributed by their organization to iCloud or iTunes. |
Allow notes and highlights sync for enterprise books | When this option is off, users can’t sync notes or highlights to other devices using iCloud. |
Allow iCloud photo sharing | When this option is off, users can’t subscribe to or publish shared photo streams. |
Allow My Photo Stream | When this option is off, photos in My Photo Stream are erased from the device, photos from the Camera Roll aren’t sent to My Photo Stream, and photos and videos in shared streams can no longer be viewed on the device. If there are no other copies of these photos and videos, they may be lost. |
Allow automatic sync while roaming | When this option is off, devices that are roaming sync only when an account is accessed by the user. |
Force encrypted backups | When this option is off, users can choose whether or not device backups performed in iTunes are stored in encrypted format on the user’s Mac. The default is On. If any profile is encrypted and this option is turned off, encryption of backups is required and enforced by iTunes. Profiles installed on the device by Profile Manager are never encrypted. |
Force limited ad tracking | When this option is off, apps can use the Advertising Identifier (a nonpermanent device identifier) to serve targeted ads to the user. The default is On. |
Allow Erase all Content and Settings (Supervised only) | When this option is off, users can’t erase their device and reset it to factory defaults. |
Allow users to accept untrusted TLS certificates | When this option is off, users aren’t asked if they want to trust certificates that can’t be verified. This setting applies to Safari, Mail, Contacts, and Calendar accounts. When this option is on, only certificates with trusted root certificates are accepted without a prompt. To view the root CAs accepted by iOS, see the Apple support article, List of available trusted root certificates. |
Allow automatic updates to certificate trust settings | When this option is off, automatic updates to certificate trust settings can’t take place. |
Allow configuring restrictions (Supervised only) | When this option is off, users can’t set their own restrictions on their device. |
Allow installing configuration profiles (Supervised only) | When this option is off, configuration profiles can’t be manually installed by users. |
Allow modifying account settings (Supervised only) | When this option is off, users can’t create new accounts or change their user name, password, or other settings associated with their account. |
Allow modifying cellular data app settings (Supervised only) | When this option is off, users can’t change any settings regarding what apps use cellular data. |
Allow modifying Find My Friends settings (Supervised only) | When this option is off, users can’t change any settings in the Find My Friends app. |
Allow pairing with non-Configurator hosts (Supervised only) | When this option is off, users can’t pair their iOS device with anything but the Mac with Apple Configurator installed, where the device was first supervised. |
Allow documents from managed sources in unmanaged destinations | When this option is off, documents created or downloaded from managed sources can’t be opened in unmanaged destinations. |
Allow documents from unmanaged sources in managed destinations | When this option is off, documents created or downloaded from unmanaged sources can’t be opened in managed destinations. |
Allow Handoff | When this option is off, users can’t use Handoff with their Apple devices. |
Allow Internet search results in Spotlight | When this option is off, Spotlight won’t return any results from an Internet search. |
Allow Touch ID to unlock device | When this option is off, users must use a passcode to unlock the device. |
Require passcode on first AirPlay pairing | When this option is off, a passcode isn’t required when a device is first paired for AirPlay. The default is On. |
Allow Passbook notifications in Lock screen | When this option is off, users must unlock the device to use Passbook. |
Show Control Center in Lock screen | When this option is off, users can’t swipe up to view Control Center. |
Show Notification Center in Lock screen | When this option is off, users can’t receive notifications if the screen is locked. |
Show Today view in Lock screen | When this option is off, users can’t swipe down to see Notification Center using the Today View in the Lock screen. |
Apps
Setting | Description |
|---|---|
Allow use of YouTube (ignored in iOS 6 or later) | When this option is off, the YouTube app is disabled and its icon is removed from the Home screen. |
Allow use of iTunes Music Store | When this option is off, the iTunes Store is disabled and its icon is removed from the Home screen. Users can’t preview, purchase, or download content. |
Allow use of Game Center (Supervised only) | When this option is off, the Game Center app and its icon are removed. |
Allow multiplayer gaming | When this option is off, users can’t play multiplayer games in Game Center. |
Allow adding Game Center friends | When this option is off, users can’t find or add friends in Game Center. |
Allow use of Safari | When this option is off, the Safari web browser app is disabled and its icon is removed from the Home screen. This also prevents users from opening web clips. |
Allow Podcasts (Supervised only) | When this option is off, users can’t download Podcasts. |
Enable autofill | When this option is off, Safari doesn’t remember what users enter in web forms. |
Force fraud warning | When this option is off, Safari won’t attempt to prevent the user from visiting websites identified as being fraudulent or compromised. The default is On. |
Enable JavaScript | When this option is off, Safari ignores all JavaScript on websites. |
Block pop-ups | When this option is off, pop-ups will not be blocked in Safari. The default is On. |
Accept Cookies | Sets the cookie policy in Safari. Choose to accept all cookies, accept no cookies, or reject cookies from sites not directly accessed. The default is Always. |
Autonomous Single App Mode (Supervised only) | Allows selected apps to be used in Single App Mode |
Media content
Setting | Description |
|---|---|
Media Restrictions | Select a ratings region, and then select maximum allowed ratings for movies, TV shows, and apps. |
Allow playback of explicit music, podcasts, and iTunes U content | When this option is off, explicit music or video content purchased from the iTunes Store or listed in iTunes U is hidden. Explicit content is flagged by content providers, such as record labels, when sold through the iTunes Store or distributed through iTunes U. |
Allow explicit sexual content in iBooks Store | When this option is off, explicit sexual content purchased from the iBooks Store is hidden. Explicit content is flagged by content providers when sold through the iBooks Store. |