iOS restrictions settings

Use this payload to specify which device features can be used. When the same restriction is set or cleared in more than one configuration profile, the more restrictive setting is applied.

Note: Use the iOS restrictions payload for iOS device, user, and user group configuration profiles. For more information, see About profiles and payloads and Payload best practices.

Functionality restrictions

Setting

Description

Allow use of camera

When this option is off, cameras are disabled and the Camera icon is removed from the Home screen. Users can’t take photographs or videos, or use FaceTime.

Allow FaceTime

When this option is off, users can’t place or receive FaceTime audio or video calls.

Allow screenshots and screen recordings

When this option is off, users can’t save a screenshot or screen recording of the display.

Allow AirDrop (Supervised only)

When this option is off, users can’t use AirDrop with any apps.

Allow iMessage (Supervised only)

When this option is off for devices with only Wi-Fi, the Messages app is hidden. When this option is off for devices with Wi-Fi and cellular, the Messages app is still available, but only the SMS/MMS service can be used.

Allow voice dialing while device is locked

When this option is off, users can’t use voice commands to dial their phone when it’s locked.

Allow Siri

When this option is off, Siri can’t be used.

Allow Siri while device locked

When this option is off, Siri only responds when the device is unlocked.

Enable Siri profanity filter (Supervised only)

When this option is off, the profanity filter in Siri isn’t enabled. The default is On.

Allow user-generated content in Siri (Supervised only)

When this option is off, Siri can’t obtain content from sources that allow user-generated content, such as Wikipedia.

Allow iBooks Store (Supervised only)

When this option is off, the iBooks Store is disabled, and users can’t access it from the iBooks app.

Allow installing apps using Apple Configurator 2 and iTunes

When this option is off, App Store is disabled and its icon is removed from the Home screen. Users can’t install or update apps from the App Store using App Store, iTunes, or MDM. In-house enterprise apps can still be installed and updated.

Allow installing apps using App Store (Supervised only)

When this option is off, users can’t use the App Store to install apps.

Allow automatic app downloads (Supervised only)

When this option is off, the App Store won’t automatically download apps.

Allow removing apps (Supervised only)

When this option is off, users can’t remove installed apps.

Allow In-App Purchase

When this option is off, users can’t make in-app purchases.

Require iTunes password for all purchases

When this option is off, iTunes in-app purchases and iTunes purchases don’t prompt for the account password. The default is On.

Allow iCloud backup

When this option is off, device backup is only performed in iTunes.

Allow iCloud documents and data

When this option is off, documents and data aren’t added to iCloud.

Allow iCloud keychain

When this option is off, iCloud Keychain isn’t used.

Allow managed apps to store data in iCloud

When this option is off, users can’t store data from managed apps in iCloud.

Allow backup of enterprise books

When this option is off, users can’t back up books distributed by their organization to iCloud or iTunes.

Allow notes and highlights sync for enterprise books

When this option is off, users can’t sync notes or highlights to other devices using iCloud.

Allow iCloud Photo Sharing

When this option is off, users can’t subscribe to or publish shared photo streams.

Allow My Photo Stream

When this option is off, photos in My Photo Stream are erased from the device, photos from the Camera Roll aren’t sent to My Photo Stream, and photos and videos in shared streams can no longer be viewed on the device.

Important: If there are no other copies of these photos and videos, they may be lost.

Allow automatic sync while roaming

When this option is off, devices that are roaming sync only when an account is accessed by the user.

Force encrypted backups

When this option is off, users can choose whether or not device backups performed in iTunes are stored in encrypted format on the user’s Mac.

If any profile is encrypted and this option is turned off, encryption of backups is required and enforced by iTunes. Profiles installed on the device by Profile Manager are never encrypted.

Force limited ad tracking

When this option is off, apps can use the Advertising Identifier (a nonpermanent device identifier) to serve the user targeted ads.

Allow Erase all Content and Settings (Supervised only)

When this option is off, users can’t erase their device and reset it to factory defaults.

Allow users to accept untrusted TLS certificates

When this option is off, users aren’t asked if they want to trust certificates that can’t be verified. This setting applies to Safari, Mail, Contacts, and Calendar accounts. When this option is on, only certificates with trusted root certificates are accepted without a prompt. To view the root CAs accepted by iOS, see the Apple Support article, List of available trusted root certificates.

Allow automatic updates to certificate trust settings

When this option is off, automatic updates to certificate trust settings can’t occur.

Allow trusting new enterprise app authors

When this option is off, users can’t allow new enterprise apps authors to be trusted, which prohibits apps from those authors from opening.

Allow installing configuration profiles (Supervised only)

When this option is off, configuration profiles can’t be manually installed by users.

Allow modifying account settings (Supervised only)

When this option is off, users can’t create new accounts or change their user name, password, or other settings associated with their account.

Allow modifying cellular data app settings (Supervised only)

When this option is off, users can’t change any settings regarding what apps use cellular data.

Allow modifying Find My Friends settings (Supervised only)

When this option is off, users can’t change any settings in the Find My Friends app.

Allow modifying passcode (Supervised only)

When this option is off, users can’t change the set passcode.

Allow modifying device name (Supervised only)

When this option is off, users can’t change the name of the device as shown in Settings > General > About.

Allow modifying Touch ID fingerprints (Supervised only)

When this option is off, users can’t add or remove existing Touch ID information.

Allow modifying restrictions (Supervised only)

When this option is off, users can’t set their own restrictions on their device.

Allow modifying wallpaper (Supervised only)

When this option is off, users can’t modify the wallpaper for the Lock screen or Home screen.

Allow pairing with non-Configurator hosts (Supervised only)

When this option is off, users can’t pair their iOS device with anything but the Mac with Apple Configurator 2 installed, where the device was first supervised.

Allow documents from managed sources in unmanaged destinations

When this option is off, documents created or downloaded from managed sources can’t be opened in unmanaged destinations.

Allow documents from unmanaged sources in managed destinations

When this option is off, documents created or downloaded from unmanaged sources can’t be opened in managed destinations.

Treat AirDrop as unmanaged destination

When this option is on, users don’t see AirDrop as an option from a managed app. The default is off.

Allow Handoff

When this option is off, users can’t use Handoff with their Apple devices.

Allow Spotlight Suggestions

When this option is off, Spotlight won’t return any results from an Internet search.

Allow sending diagnostic and usage data to Apple

When this option is off, users can’t choose to send diagnostic information to Apple.

Allow Touch ID to unlock device

When this option is off, users must use a passcode to unlock the device.

Allow modifying Touch ID fingerprints (Supervised only)

When this option is off, users can’t add or remove existing Touch ID information.

Force Apple Watch wrist detection

When this option is on, Apple Watch locks automatically when it’s removed from the user’s wrist. It can be unlocked with its passcode or the paired iPhone. The default is Off.

Allow pairing with Apple Watch (Supervised only)

When this option is off, users can’t pair their supervised iPhone with Apple Watch.

Require passcode on first AirPlay pairing

When this option is off, a passcode isn’t required when a device is first paired for AirPlay. The default is On.

Allow predictive keyboard (Supervised only)

When this option is off, users won’t see the predictive keyboard.

Allow keyboard shortcuts (Supervised only)

When this option is off, users can’t use any keyboard shortcuts.

Allow auto correction (Supervised only)

When this option is off, users won’t see any word correction suggestions.

Allow spell check (Supervised only)

When this option is off, users won’t see potentially misspelled words underlined in red.

Allow Define (Supervised only)

When this options is off, users can’t double-tap to search for a word’s definition.

Show Wallet notifications in Lock screen

When this option is off, users must unlock the device to use Wallet.

Show Control Center in Lock screen

When this option is off, users can’t swipe up to view Control Center.

Show Notification Center in Lock screen

When this option is off, users can’t receive notifications if the screen is locked.

Show Today view in Lock screen

When this option is off, users can’t swipe down to see Notification Center using the Today View in the Lock screen.

App restrictions

Setting

Description

Allow use of iTunes Store

When this option is off, the iTunes Store is disabled and its icon is removed from the Home screen. Users can’t preview, purchase, or download content.

Allow News (Supervised only)

When this option is off, users can’t use the News app.

Allow Podcasts (Supervised only)

When this option is off, users can’t download Podcasts.

Allow use of Game Center (Supervised only)

When this option is off, the Game Center app and its icon are removed.

Allow multiplayer gaming (Supervised only)

When this option is off, users can’t play multiplayer games in Game Center.

Allow adding Game Center friends

When this option is off, users can’t find or add friends in Game Center.

Allow use of Safari

When this option is off, the Safari web browser app is disabled and its icon is removed from the Home screen. This also prevents users from opening web clips.

Enable autofill

When this option is off, Safari doesn’t remember what users enter in web forms.

Force fraud warning

When this option is on, Safari attempts to prevent the user from visiting websites identified as being fraudulent or compromised. The default is off.

Enable JavaScript

When this option is off, Safari ignores all JavaScript on websites.

Block pop-ups

When this option is off, pop-ups aren’t blocked in Safari. The default is on.

Accept Cookies

Sets the cookie policy in Safari. Choose to always block all cookies, always accept all cookies, allow cookies from current websites only, or from websites the user visits. The default is always.

Autonomous Single App Mode

(Supervised only)

Allows selected apps to be used in Single App Mode

Media content restrictions

Setting

Description

Media Restrictions

Select a ratings region, and then select maximum allowed ratings for movies, TV shows, and apps.

Allow playback of explicit music, podcasts, and iTunes U content

When this option is off, explicit music or video content purchased from the iTunes Store or listed in iTunes U is hidden. Explicit content is flagged by content providers, such as record labels, when sold through the iTunes Store or distributed through iTunes U.

Allow explicit sexual content in iBooks Store

When this option is off, explicit sexual content purchased from the iBooks Store is hidden. Explicit content is flagged by content providers when sold through the iBooks Store.