The payload that configures a device to run a single app.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
App App A dictionary that contains information about the app. 3 subkeys | dictionary | required | — | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ Identifier Identifier The app's bundle identifier. | string | required | — | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ Options Options A dictionary of options that the user can't change. 13 subkeys | dictionary | optional | — | ✓Yes | iOS (7.0+) |
└─ └─ Disable touch DisableTouch If `true`, the system disables the touch screen. In tvOS, it disables the touch surface on the Apple TV Remote. | boolean | optional | false | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ └─ Disable device rotation DisableDeviceRotation If `true`, the system disables device rotation sensing. | boolean | optional | false | ✗No | |
└─ └─ Disable volume buttons DisableVolumeButtons If `true`, the system disables the volume buttons. | boolean | optional | false | ✗No | |
└─ └─ Disable ringer switch DisableRingerSwitch If `true`, the system disables the ringer switch. When disabled, the ringer behavior depends on what position the switch was in when it was first disabled. | boolean | optional | false | ✗No | |
└─ └─ Disable sleep wake button DisableSleepWakeButton If `true`, the system disables the sleep/wake button. | boolean | optional | false | ✗No | |
└─ └─ Disable auto lock DisableAutoLock If `true`, the device doesn't automatically go to sleep after an idle period. | boolean | optional | false | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ └─ Enable VoiceOver EnableVoiceOver If `true`, the system enables VoiceOver. | boolean | optional | false | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ └─ Enable Zoom EnableZoom If `true`, the system enables Zoom. | boolean | optional | false | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ └─ Enable Invert Colors EnableInvertColors If `true`, the system enables Invert Colors. | boolean | optional | false | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ └─ Enable AssistiveTouch EnableAssistiveTouch If `true`, the system enables AssistiveTouch. | boolean | optional | false | ✗No | |
└─ └─ Enable Speak Selection EnableSpeakSelection If `true`, the system enables Speak Selection. | boolean | optional | false | ✗No | |
└─ └─ Enable Mono Audio EnableMonoAudio If `true`, the system enables Mono Audio. | boolean | optional | false | ✗No | |
└─ └─ Enable Voice Control EnableVoiceControl If `true`, the system enables Voice Control. | boolean | optional | false | ✓Yes | iOS (13.0+) |
└─ User enabled options UserEnabledOptions A dictionary of user-editable options. 5 subkeys | dictionary | optional | — | ✓Yes | iOS (7.0+) |
└─ └─ Voice Control VoiceControl If `true`, the system allows the user to toggle Voice Control. | boolean | optional | false | ✓Yes | iOS (13.0+) |
└─ └─ VoiceOver VoiceOver If `true`, the system allows the user to toggle VoiceOver. | boolean | optional | false | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ └─ Zoom Zoom If `true`, the system allows the user to toggle Zoom. | boolean | optional | false | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ └─ Invert Colors InvertColors If `true`, the system allows the user to toggle Invert Colors. | boolean | optional | false | ✓Yes | iOS (6.0+)tvOS (10.2+) |
└─ └─ AssistiveTouch AssistiveTouch If `true`, the system allows the user to toggle AssistiveTouch. | boolean | optional | false | ✗No |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information