iOS restrictions settings

Use this payload to specify which iOS device features users can use.

Functionality

Note:  Use the iOS restrictions payload for iOS device, user, and user group configuration profiles. For more information, see About profiles and payloads and Payload best practices.

Setting

Description

Allow use of camera

When this option is off, cameras are disabled and the Camera icon is removed from the Home screen. Users can’t take photographs or videos, or use FaceTime.

Allow FaceTime

When this option is off, users can’t place or receive FaceTime audio or video calls.

Allow screenshots

When this option is off, users can’t save a screenshot of the display.

Allow AirDrop (Supervised only)

When this option is off, users can’t use AirDrop with any apps.

Allow iMessage (Supervised only)

When this option is off, users can’t send or receive messages using iMessage. If the device supports text messaging, the user can still send and receive text messages. If your device doesn’t support text messaging, the Messages icon is removed from the Home screen.

Allow voice dialing

When this option is off, users can’t dial a phone number using voice commands.

Allow Siri

When this option is off, Siri can’t be used.

Allow Siri while device locked

When this option is off, Siri only responds when the device is unlocked.

Enable Siri profanity filter (Supervised only)

When this option is off, the profanity filter in Siri isn’t enabled. The default is On.

Allow user-generated content in Siri (Supervised only)

When this option is off, Siri can’t obtain content from sources that allow user-generated content, such as Wikipedia.

Allow iBooks Store (Supervised only)

When this option is off, the iBooks Store is disabled, and users can’t access it from the iBooks app.

Allow podcasts (Supervised only)

When this option is off, users can’t download Podcasts.

Allow installing apps

When this option is off, App Store is disabled and its icon is removed from the Home screen. Users can’t install or update apps from the App Store using App Store, iTunes, or MDM. In-house apps can still be installed and updated.

Allow removing apps (Supervised only)

When this option is off, users can’t remove installed apps.

Allow In-App Purchase

When this option is off, users can’t make in-app purchases.

Require iTunes password for all purchases

When this option is off, iTunes in-app purchases and iTunes purchases don’t prompt for the account password. The default is On.

Allow iCloud backup

When this option is off, device backup is only performed in iTunes.

Allow iCloud documents and data

When this option is off, documents and data aren’t added to iCloud.

Allow iCloud keychain

When this option is off, iCloud Keychain isn’t used.

Allow managed apps to store data in iCloud

When this option is off, users can’t store data from managed apps in iCloud.

Allow backup of enterprise books

When this option is off, users can’t back up books distributed by their organization to iCloud or iTunes.

Allow notes and highlights sync for enterprise books

When this option is off, users can’t sync notes or highlights to other devices using iCloud.

Allow iCloud photo sharing

When this option is off, users can’t subscribe to or publish shared photo streams.

Allow My Photo Stream

When this option is off, photos in My Photo Stream are erased from the device, photos from the Camera Roll aren’t sent to My Photo Stream, and photos and videos in shared streams can no longer be viewed on the device. If there are no other copies of these photos and videos, they may be lost.

Allow automatic sync while roaming

When this option is off, devices that are roaming sync only when an account is accessed by the user.

Force encrypted backups

When this option is off, users can choose whether or not device backups performed in iTunes are stored in encrypted format on the user’s Mac. The default is On.

If any profile is encrypted and this option is turned off, encryption of backups is required and enforced by iTunes. Profiles installed on the device by Profile Manager are never encrypted.

Force limited ad tracking

When this option is off, apps can use the Advertising Identifier (a nonpermanent device identifier) to serve targeted ads to the user. The default is On.

Allow Erase all Content and Settings (Supervised only)

When this option is off, users can’t erase their device and reset it to factory defaults.

Allow users to accept untrusted TLS certificates

When this option is off, users aren’t asked if they want to trust certificates that can’t be verified. This setting applies to Safari, Mail, Contacts, and Calendar accounts. When this option is on, only certificates with trusted root certificates are accepted without a prompt. To view the root CAs accepted by iOS, see the Apple support article, List of available trusted root certificates.

Allow automatic updates to certificate trust settings

When this option is off, automatic updates to certificate trust settings can’t take place.

Allow configuring restrictions (Supervised only)

When this option is off, users can’t set their own restrictions on their device.

Allow installing configuration profiles (Supervised only)

When this option is off, configuration profiles can’t be manually installed by users.

Allow modifying account settings (Supervised only)

When this option is off, users can’t create new accounts or change their user name, password, or other settings associated with their account.

Allow modifying cellular data app settings (Supervised only)

When this option is off, users can’t change any settings regarding what apps use cellular data.

Allow modifying Find My Friends settings (Supervised only)

When this option is off, users can’t change any settings in the Find My Friends app.

Allow pairing with non-Configurator hosts (Supervised only)

When this option is off, users can’t pair their iOS device with anything but the Mac with Apple Configurator installed, where the device was first supervised.

Allow documents from managed sources in unmanaged destinations

When this option is off, documents created or downloaded from managed sources can’t be opened in unmanaged destinations.

Allow documents from unmanaged sources in managed destinations

When this option is off, documents created or downloaded from unmanaged sources can’t be opened in managed destinations.

Allow Handoff

When this option is off, users can’t use Handoff with their Apple devices.

Allow Internet search results in Spotlight

When this option is off, Spotlight won’t return any results from an Internet search.

Allow Touch ID to unlock device

When this option is off, users must use a passcode to unlock the device.

Require passcode on first AirPlay pairing

When this option is off, a passcode isn’t required when a device is first paired for AirPlay. The default is On.

Allow Passbook notifications in Lock screen

When this option is off, users must unlock the device to use Passbook.

Show Control Center in Lock screen

When this option is off, users can’t swipe up to view Control Center.

Show Notification Center in Lock screen

When this option is off, users can’t receive notifications if the screen is locked.

Show Today view in Lock screen

When this option is off, users can’t swipe down to see Notification Center using the Today View in the Lock screen.

Apps

Setting

Description

Allow use of YouTube (ignored in iOS 6 or later)

When this option is off, the YouTube app is disabled and its icon is removed from the Home screen.

Allow use of iTunes Music Store

When this option is off, the iTunes Store is disabled and its icon is removed from the Home screen. Users can’t preview, purchase, or download content.

Allow use of Game Center (Supervised only)

When this option is off, the Game Center app and its icon are removed.

Allow multiplayer gaming

When this option is off, users can’t play multiplayer games in Game Center.

Allow adding Game Center friends

When this option is off, users can’t find or add friends in Game Center.

Allow use of Safari

When this option is off, the Safari web browser app is disabled and its icon is removed from the Home screen. This also prevents users from opening web clips.

Allow Podcasts (Supervised only)

When this option is off, users can’t download Podcasts.

Enable autofill

When this option is off, Safari doesn’t remember what users enter in web forms.

Force fraud warning

When this option is off, Safari won’t attempt to prevent the user from visiting websites identified as being fraudulent or compromised. The default is On.

Enable JavaScript

When this option is off, Safari ignores all JavaScript on websites.

Block pop-ups

When this option is off, pop-ups will not be blocked in Safari. The default is On.

Accept Cookies

Sets the cookie policy in Safari. Choose to accept all cookies, accept no cookies, or reject cookies from sites not directly accessed. The default is Always.

Autonomous Single App Mode

(Supervised only)

Allows selected apps to be used in Single App Mode

Media content

Setting

Description

Media Restrictions

Select a ratings region, and then select maximum allowed ratings for movies, TV shows, and apps.

Allow playback of explicit music, podcasts, and iTunes U content

When this option is off, explicit music or video content purchased from the iTunes Store or listed in iTunes U is hidden. Explicit content is flagged by content providers, such as record labels, when sold through the iTunes Store or distributed through iTunes U.

Allow explicit sexual content in iBooks Store

When this option is off, explicit sexual content purchased from the iBooks Store is hidden. Explicit content is flagged by content providers when sold through the iBooks Store.