Apple Device Policy
Back to Explorer
GitHub YAMLApple Docs

External Intelligence Settings ()

New in iOS 26.4, macOS 26.4, visionOS 26.4

The declaration to configure External Intelligence Integrations settings.

iOS(26.4)macOS(26.4)visionOS(26.4)
Branch: release

Settings (4)

SettingTypeRequiredDefaultManual InstallSupported OS
Allow External Intelligence Integrations
Enabled
If `false`, disables external intelligence integrations.
booleanoptionaltrue
✓Yes
iOS (26.4+)macOS (26.4+)visionOS (26.4+)
Allow External Intelligence Integrations Sign In
AllowSignIn
If `false`, disables sign-in for external intelligence integrations.
booleanoptionaltrue
✓Yes
iOS (26.4+)macOS (26.4+)visionOS (26.4+)
Allowed External Intelligence Workspace IDs
AllowedWorkspaceIDs
An array of strings, but currently restricted to a single element. If present, Apple Intelligence allows use of only the given external integration workspace ID, and requires a sign-in to make requests. The user is required to sign in to integrations that support signing in. Multiple values combine using an intersect operation.
1 subkey
arrayoptional—
✓Yes
iOS (26.4+)macOS (26.4+)visionOS (26.4+)
└─
Allowed Workspace ID
workspaceID
string—
✓Yes
iOS (26.4+)macOS (26.4+)visionOS (26.4+)

Apple MDM & DDM Policy Explorer

Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.

Reference: policy categories & common keys

Policy categories

  • Configuration Profile
  • Declarative Configuration
  • Declarative Activation
  • Declarative Asset
  • Declarative Management

Common policy keys

  • com.apple.wifi.managed – Wi-Fi network configuration
  • com.apple.vpn.managed – VPN configuration
  • com.apple.applicationaccess – App and feature restrictions
  • com.apple.security.pkcs1 – Certificate (PKCS#1) payload
  • com.apple.security.pkcs12 – Identity certificate (PKCS#12) payload
  • com.apple.security.scep – SCEP certificate enrolment
  • com.apple.mail.managed – Mail account configuration
  • com.apple.eas.account – Exchange ActiveSync account
  • com.apple.MCX – Managed Client (macOS) preferences
  • com.apple.MCX.FileVault2 – FileVault 2 disk encryption
  • com.apple.dock – macOS Dock configuration
  • com.apple.screensaver – Screensaver configuration
  • com.apple.loginwindow – macOS login window configuration
  • com.apple.systempolicy.managed – Gatekeeper / system policy
  • com.apple.systempreferences – System Preferences pane restrictions
  • com.apple.SoftwareUpdate – Software update behaviour
  • com.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)
  • com.apple.notificationsettings – Per-app notification settings
  • com.apple.webcontent-filter – Web content filter
  • com.apple.dnsSettings.managed – DNS settings (DoH / DoT)
  • com.apple.relay.managed – Network relay configuration
  • com.apple.extensiblesso – Extensible Single Sign-On
  • com.apple.configuration.passcode.settings – DDM: passcode policy
  • com.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software update
  • com.apple.configuration.services.configuration-files – DDM: service configuration files
  • com.apple.configuration.management.status-subscriptions – DDM: status subscriptions
  • com.apple.activation.simple – DDM: simple activation predicate
  • com.apple.management.organization-info – DDM: organization information