Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Use the interactive explorer to search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
The payload that configures parental controls for apps.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
familyControlsEnabled familyControlsEnabled If `true`, enables app access restrictions. | boolean | required | — | ✓Yes | macOS (10.7+) |
whiteList whiteList The allow list of app item dictionaries. 1 subkey | array | optional | — | ✓Yes | macOS (10.7+) |
└─ whiteListItem whiteListItem A dictionary defining an app for parental control. 6 subkeys | dictionary | — | ✓Yes | macOS (10.7+) | |
└─ └─ bundleID bundleID The bundle ID of the app. | string | required | — | ✓Yes | macOS (10.7+) |
└─ └─ appID appID The identifier of the app. Obtain this value from the Security framework using `SecCodeCopyDesignatedRequirement`. | data | required | — | ✓Yes | macOS (10.7+) |
└─ └─ detachedSignature detachedSignature The signature for an unsigned binary. | data | optional | — | ✓Yes | macOS (10.7+) |
└─ └─ disabled disabled If `true`, this app isn't added to the allow list. | boolean | optional | false | ✓Yes | macOS (10.7+) |
└─ └─ subApps subApps An array of nested helper applications. 1 subkey | array | optional | — | ✓Yes | macOS (10.7+) |
└─ └─ └─ whiteListItem whiteListItem A dictionary defining an app for parental control. 6 subkeys | dictionary | — | ✓Yes | macOS (10.7+) | |
└─ └─ └─ └─ [Structure continues recursively] ↻ This structure continues with 6 subkeys (recursive structure - refers back to whiteListItem). See Apple's documentation for the complete structure. | — | ✓Yes | macOS (10.7+) | ||
└─ └─ displayName displayName The name used for display purposes. | string | optional | — | ✓Yes | macOS (10.7+) |
pathBlackList pathBlackList Deprecated (macOS 10.15) The paths to apps in the deny list. This property is deprecated in macOS 10.15 and later. 1 subkey | array | optional | — | ✓Yes | macOS (legacy - 10.15) |
└─ pathBlackListItem pathBlackListItem A path. | string | required | — | ✓Yes | macOS (10.7+) |
pathWhiteList pathWhiteList Deprecated (macOS 10.15) The paths to apps in the allow list. This property is deprecated in macOS 10.15 and later. 1 subkey | array | optional | — | ✓Yes | macOS (legacy - 10.15) |
└─ pathWhiteListItem pathWhiteListItem A path. | string | required | — | ✓Yes | macOS (10.7+) |
