The payload that configures parental controls for apps.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
familyControlsEnabled familyControlsEnabled Deprecated (macOS 27.0) If `true`, enables app access restrictions. | boolean | required | — | ✓Yes | macOS (10.7 - 27.0) |
allowList allowList Deprecated (macOS 27.0) The allow list of app item dictionaries. 1 subkey | array | optional | — | ✓Yes | macOS (10.15 - 27.0) |
└─ allowListItem allowListItem Deprecated (macOS 27.0) A dictionary defining an app for parental control. 6 subkeys | dictionary | — | ✓Yes | macOS (10.7 - 27.0) | |
└─ └─ bundleID bundleID Deprecated (macOS 27.0) The bundle ID of the app. | string | required | — | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ appID appID Deprecated (macOS 27.0) The identifier of the app. Obtain this value from the Security framework using `SecCodeCopyDesignatedRequirement`. | data | required | — | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ detachedSignature detachedSignature Deprecated (macOS 27.0) The signature for an unsigned binary. | data | optional | — | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ disabled disabled Deprecated (macOS 27.0) If `true`, this app isn't added to the allow list. | boolean | optional | false | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ subApps subApps Deprecated (macOS 27.0) An array of nested helper applications. 1 subkey | array | optional | — | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ └─ allowListItem allowListItem Deprecated (macOS 27.0) A dictionary defining an app for parental control. 6 subkeys | dictionary | — | ✓Yes | macOS (10.7 - 27.0) | |
└─ └─ └─ └─ [Structure continues recursively] ↻ Deprecated (macOS 27.0) This structure continues with 6 subkeys (recursive structure - refers back to allowListItem). See Apple's documentation for the complete structure. | — | ✓Yes | macOS (10.7 - 27.0) | ||
└─ └─ displayName displayName Deprecated (macOS 27.0) The name used for display purposes. | string | optional | — | ✓Yes | macOS (10.7 - 27.0) |
whiteList whiteList Deprecated (macOS 10.15) The allow list of app item dictionaries. This property is deprecated in macOS 10.15 and later - use `allowList` instead. 1 subkey | array | optional | — | ✓Yes | macOS (legacy - 10.15) |
└─ allowListItem allowListItem Deprecated (macOS 27.0) A dictionary defining an app for parental control. 6 subkeys | dictionary | — | ✓Yes | macOS (10.7 - 27.0) | |
└─ └─ bundleID bundleID Deprecated (macOS 27.0) The bundle ID of the app. | string | required | — | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ appID appID Deprecated (macOS 27.0) The identifier of the app. Obtain this value from the Security framework using `SecCodeCopyDesignatedRequirement`. | data | required | — | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ detachedSignature detachedSignature Deprecated (macOS 27.0) The signature for an unsigned binary. | data | optional | — | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ disabled disabled Deprecated (macOS 27.0) If `true`, this app isn't added to the allow list. | boolean | optional | false | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ subApps subApps Deprecated (macOS 27.0) An array of nested helper applications. 1 subkey | array | optional | — | ✓Yes | macOS (10.7 - 27.0) |
└─ └─ └─ allowListItem allowListItem Deprecated (macOS 27.0) A dictionary defining an app for parental control. 6 subkeys | dictionary | — | ✓Yes | macOS (10.7 - 27.0) | |
└─ └─ └─ └─ [Structure continues recursively] ↻ Deprecated (macOS 27.0) This structure continues with 6 subkeys (recursive structure - refers back to allowListItem). See Apple's documentation for the complete structure. | — | ✓Yes | macOS (10.7 - 27.0) | ||
└─ └─ displayName displayName Deprecated (macOS 27.0) The name used for display purposes. | string | optional | — | ✓Yes | macOS (10.7 - 27.0) |
pathDenyList pathDenyList Deprecated (macOS 27.0) The paths to apps in the deny list. 1 subkey | array | optional | — | ✓Yes | macOS (10.15 - 27.0) |
└─ pathDenyListItem pathDenyListItem Deprecated (macOS 27.0) A path. | string | required | — | ✓Yes | macOS (10.7 - 27.0) |
pathBlackList pathBlackList Deprecated (macOS 10.15) The paths to apps in the deny list. This property is deprecated in macOS 10.15 and later - use `pathDenyList` instead. 1 subkey | array | optional | — | ✓Yes | macOS (legacy - 10.15) |
└─ pathBlackListItem pathBlackListItem Deprecated (macOS 27.0) A path. | string | required | — | ✓Yes | macOS (10.7 - 27.0) |
pathAllowList pathAllowList Deprecated (macOS 27.0) The paths to apps in the allow list. 1 subkey | array | optional | — | ✓Yes | macOS (10.15 - 27.0) |
└─ pathAllowListItem pathAllowListItem Deprecated (macOS 27.0) A path. | string | required | — | ✓Yes | macOS (10.7 - 27.0) |
pathWhiteList pathWhiteList Deprecated (macOS 10.15) The paths to apps in the allow list. This property is deprecated in macOS 10.15 and later - use `pathAllowList` instead. 1 subkey | array | optional | — | ✓Yes | macOS (legacy - 10.15) |
└─ pathWhiteListItem pathWhiteListItem Deprecated (macOS 27.0) A path. | string | required | — | ✓Yes | macOS (10.7 - 27.0) |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information