The payload that configures network-usage rules.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
ApplicationRules ApplicationRules An array of application rules, that apply to only managed apps. 1 subkey | array | optional | — | ✗No | iOS (9.0+) |
└─ ApplicationRulesItem ApplicationRulesItem The application rules dictionary. 3 subkeys | dictionary | — | ✗No | iOS (9.0+) | |
└─ └─ AppIdentifierMatches AppIdentifierMatches A list of managed app identifiers, as strings, that must follow the associated rules. If this key is missing, the rules apply to all managed apps on the device.
Each string in the `AppIdentifierMatches` array may either be an exact app identifier match (for example, `com.mycompany.myapp`) or it may specify a prefix match for the bundle ID by using the \* wildcard character. If used, this character must appear after a period (.) and may only appear once, at the end of the string; for example, `com.mycompany.*`. 1 subkey | array | optional | — | ✗No | iOS (9.0+) |
└─ └─ └─ AppIdentifierMatchesItem AppIdentifierMatchesItem A managed app identifier. | string | required | — | ✗No | iOS (9.0+) |
└─ └─ AllowRoamingCellularData AllowRoamingCellularData If `false`, disables cellular data while roaming for all matching managed apps. | boolean | optional | true | ✗No | iOS (9.0+) |
└─ └─ AllowCellularData AllowCellularData If `false`, disables cellular data for all matching managed apps. | boolean | optional | true | ✗No | iOS (9.0+) |
SIMRules SIMRules An array of SIM rules, that apply to all apps. 1 subkey | array | optional | — | ✓Yes | iOS (13.0+) |
└─ SIMRulesItem SIMRulesItem The policy for individual SIM cards. 2 subkeys | dictionary | — | ✗No | iOS (9.0+) | |
└─ └─ ICCIDs ICCIDs One or more ICCIDs of SIM cards for which the `WiFiAssistPolicy` applies. All ICCIDs in all installed Network Usage Rules payloads must be unique. An example ICCID is `89310410106543789301`. 1 subkey | array | required | — | ✗No | iOS (9.0+) |
└─ └─ └─ ICCID ICCID An ICCID. | string | required | — | ✗No | iOS (9.0+) |
└─ └─ WiFiAssistPolicy WiFiAssistPolicy The Wi-Fi Assist policy to apply to the SIM cards specified in the ICCIDs. Allowed values:
- `2`: Use the default system policy for the specified SIM card(s).
- `3`: Make Wi-Fi Assist switch more aggressively from a poor Wi-Fi connection to cellular data for the specified SIM card(s). This setting may increase cellular data use and may impact battery life.
For more information, see [About Wi-Fi Assist](https://support.apple.com/en-us/HT205296). | integer | required | — | ✗No | iOS (9.0+) |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information