The declaration to configure Migration Assistant settings.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
Should do managed migration ShouldDoManagedMigration If `true`, the device manages Migration Assistant. | boolean | required | — | ✓Yes | macOS (26.4+) |
Excluded accounts ExcludedAccounts An array of strings that represent the user account short names the system excludes from migration. 1 subkey | array | optional | — | ✓Yes | macOS (26.4+) |
└─ _Accounts _Accounts | string | — | ✓Yes | macOS (26.4+) | |
Excluded paths ExcludedPaths An array of strings that represent files and directories relative to the user's home directory that the system excludes from migration. Directory paths need to include a trailing "/". For example, to exclude the "Excluded" directory in the "Documents" folder of a user's home directory, use "Documents/Excluded/". 1 subkey | array | optional | — | ✓Yes | macOS (26.4+) |
└─ _ExcludedPaths _ExcludedPaths | string | — | ✓Yes | macOS (26.4+) | |
Required paths RequiredPaths An array of strings that represent files and directories relative to the user's home directory that the system needs to migrate. Directory paths need to include a trailing "/". For example, to require the "Required" directory in the "Documents" folder of a user's home directory, use "Documents/Required/". 1 subkey | array | optional | — | ✓Yes | macOS (26.4+) |
└─ _RequiredPaths _RequiredPaths | string | — | ✓Yes | macOS (26.4+) | |
Should migrate security privacy settings ShouldMigrateSecurityPrivacySettings If `true`, the system migrates Security & Privacy settings. | boolean | required | — | ✓Yes | macOS (26.4+) |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information