Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Use the interactive explorer to search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
The payload that configures the extensions that the system allows or disallows to run on the device.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
AllowedExtensions AllowedExtensions An array of bundle identifiers for allowed extensions. 1 subkey | array | optional | — | ✓Yes | macOS (10.13+) |
└─ AllowedExtensionsItem AllowedExtensionsItem An extension identifier. | string | required | — | ✓Yes | macOS (10.13+) |
DeniedExtensions DeniedExtensions An array of bundle identifiers for extensions that the system doesn't allow to run. 1 subkey | array | optional | — | ✓Yes | macOS (10.13+) |
└─ DeniedExtensionsItem DeniedExtensionsItem An extension identifier. | string | required | — | ✓Yes | macOS (10.13+) |
DeniedExtensionPoints DeniedExtensionPoints An array of extension points for extensions that the system doesn't allow to run. 1 subkey | array | optional | — | ✓Yes | macOS (10.13+) |
└─ DeniedExtensionPointsItem DeniedExtensionPointsItem An extension identifier. | string | required | — | ✓Yes | macOS (10.13+) |
