The payload that configures the parental control web content filters.
| Setting | Type | Required | Default | Manual Install | Supported OS |
|---|---|---|---|---|---|
restrictWeb restrictWeb If `true`, enables web content filters. | boolean | required | — | ✓Yes | macOS (10.7+) |
useContentFilter useContentFilter If `true`, filters content automatically. | boolean | optional | false | ✓Yes | macOS (10.7+) |
allowListEnabled allowListEnabled If `true`, enables web content filters. | boolean | optional | false | ✓Yes | macOS (15.2+) |
whitelistEnabled whitelistEnabled Deprecated (macOS 15.2) Use `allowListEnabled` instead. | boolean | optional | false | ✓Yes | macOS (legacy - 15.2) |
siteAllowList siteAllowList An array of sites that defines an allow list. If specified, this defines additional allowed sites besides those in the automated allow list and deny list, including disallowed adult sites.
The device requires this key if `allowListEnabled` is `true`. 1 subkey | array | optional | — | ✓Yes | macOS (15.2+) |
└─ siteAllowListItem siteAllowListItem A dictionary defining a site for the allow list. 2 subkeys | dictionary | — | ✓Yes | macOS (10.7+) | |
└─ └─ address address The site prefix, including the `http(s)` scheme. | string | required | — | ✓Yes | macOS (10.7+) |
└─ └─ pageTitle pageTitle The site page title. | string | optional | — | ✓Yes | macOS (10.7+) |
siteWhitelist siteWhitelist Deprecated (macOS 15.2) Use `siteAllowList` instead. 1 subkey | array | optional | — | ✓Yes | macOS (legacy - 15.2) |
└─ siteWhitelistItem siteWhitelistItem A dictionary defining a site for the allow list. 2 subkeys | dictionary | — | ✓Yes | macOS (10.7+) | |
└─ └─ address address The site prefix, including http(s) scheme. | string | required | — | ✓Yes | macOS (10.7+) |
└─ └─ pageTitle pageTitle The site page title. | string | optional | — | ✓Yes | macOS (10.7+) |
filterAllowList filterAllowList The array of URLs that defines an allow list. When `restrictWeb` and `useContentFilter` are enabled, only URLs in the allow list are available to the user. 1 subkey | array | optional | — | ✓Yes | macOS (15.2+) |
└─ filterAllowListItem filterAllowListItem An allowed site. | string | required | — | ✓Yes | macOS (10.7+) |
filterWhitelist filterWhitelist Deprecated (macOS 15.2) Use `filterAllowList` instead. 1 subkey | array | optional | — | ✓Yes | macOS (legacy - 15.2) |
└─ filterWhitelistItem filterWhitelistItem An allowed site. | string | required | — | ✓Yes | macOS (10.7+) |
filterDenyList filterDenyList The array of URLs that defines a deny list. When `restrictWeb` and `useContentFilter` are enabled, no URLs in the deny list are available to the user. 1 subkey | array | optional | — | ✓Yes | macOS (15.2+) |
└─ filterDenyListItem filterDenyListItem A disallowed site. | string | required | — | ✓Yes | macOS (10.7+) |
filterBlacklist filterBlacklist Deprecated (macOS 15.2) Use `filterDenyList` instead. 1 subkey | array | optional | — | ✓Yes | macOS (legacy - 15.2) |
└─ filterBlacklistItem filterBlacklistItem A disallowed site. | string | required | — | ✓Yes | macOS (10.7+) |
Explore the full catalogue of Apple Mobile Device Management (MDM) and Declarative Device Management (DDM) policies for macOS and iOS. Search, filter, and reference policy keys for use with Microsoft Intune, Jamf, or any standards-compliant MDM solution.
com.apple.wifi.managed – Wi-Fi network configurationcom.apple.vpn.managed – VPN configurationcom.apple.applicationaccess – App and feature restrictionscom.apple.security.pkcs1 – Certificate (PKCS#1) payloadcom.apple.security.pkcs12 – Identity certificate (PKCS#12) payloadcom.apple.security.scep – SCEP certificate enrolmentcom.apple.mail.managed – Mail account configurationcom.apple.eas.account – Exchange ActiveSync accountcom.apple.MCX – Managed Client (macOS) preferencescom.apple.MCX.FileVault2 – FileVault 2 disk encryptioncom.apple.dock – macOS Dock configurationcom.apple.screensaver – Screensaver configurationcom.apple.loginwindow – macOS login window configurationcom.apple.systempolicy.managed – Gatekeeper / system policycom.apple.systempreferences – System Preferences pane restrictionscom.apple.SoftwareUpdate – Software update behaviourcom.apple.TCC.configuration-profile-policy – Privacy Preferences Policy Control (PPPC)com.apple.notificationsettings – Per-app notification settingscom.apple.webcontent-filter – Web content filtercom.apple.dnsSettings.managed – DNS settings (DoH / DoT)com.apple.relay.managed – Network relay configurationcom.apple.extensiblesso – Extensible Single Sign-Oncom.apple.configuration.passcode.settings – DDM: passcode policycom.apple.configuration.softwareupdate.enforcement.specific – DDM: enforced software updatecom.apple.configuration.services.configuration-files – DDM: service configuration filescom.apple.configuration.management.status-subscriptions – DDM: status subscriptionscom.apple.activation.simple – DDM: simple activation predicatecom.apple.management.organization-info – DDM: organization information