pfm_description Use this section to define restrictions settings pfm_title Restrictions pfm_format_version 1 pfm_version 1 pfm_domain com.apple.applicationaccess pfm_subkeys pfm_name PayloadDescription pfm_title Payload Description pfm_description Description of the payload pfm_type string pfm_default Configures restrictions pfm_name PayloadDisplayName pfm_title Payload Display Name pfm_description Name of the payload pfm_type string pfm_default Restrictions pfm_require always pfm_name PayloadIdentifier pfm_title Payload Identifier pfm_description A unique identifier for the payload, dot-delimited. Usually root PayloadIdentifier+subidentifier pfm_type string pfm_default com.apple.applicationaccess pfm_require always pfm_name PayloadType pfm_title Payload Type pfm_description The type of the payload, a reverse dns string pfm_type string pfm_default com.apple.applicationaccess pfm_require always pfm_name PayloadUUID pfm_title Payload UUID pfm_description Unique identifier for the payload (format 01234567-89AB-CDEF-0123-456789ABCDEF) pfm_type string pfm_default pfm_require always pfm_format ^[0-9A-Za-z]{8}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{4}-[0-9A-Za-z]{12}$ pfm_name PayloadVersion pfm_title Payload Version pfm_description The version of the whole configuration profile. pfm_type integer pfm_default 1 pfm_require always pfm_name PayloadOrganization pfm_title Payload Organization pfm_description This value describes the issuing organization of the profile, as displayed to the user pfm_type string pfm_name allowAppInstallation pfm_title Allow App Installation from Apple Configurator and iTunes pfm_description Allow only a connected Mac host to install applications pfm_type boolean pfm_default pfm_name allowUIAppInstallation pfm_title Allow App Installation from App Store pfm_description Allow the user to install applications pfm_type boolean pfm_default pfm_name allowAutomaticAppDownloads pfm_title Allow Automatic App Downloads pfm_description Allow automatic app downloads (Supervised only) pfm_type boolean pfm_default pfm_name allowAppRemoval pfm_title Allow App Removal pfm_description Allow the user to remove apps (Supervised only) pfm_type boolean pfm_default pfm_name allowSystemAppRemoval pfm_title Allow System App Removal pfm_description Allow the removal of system apps from the device (Supervised devices only) pfm_type boolean pfm_default pfm_name allowEnterpriseAppTrust pfm_title Allow Trusting Enterprise Apps pfm_description Allow the user to trust enterprise apps pfm_type boolean pfm_default pfm_name allowCamera pfm_title Allow Camera Use pfm_description Allow the user to use the camera pfm_type boolean pfm_default pfm_name allowExplicitContent pfm_title Allow Explicit Content pfm_description Allow user access of explicit content pfm_type boolean pfm_default pfm_name allowScreenShot pfm_title Allow Screenshots and Screen Recording pfm_description Allow the user to take screenshots or screen recordings pfm_type boolean pfm_default pfm_name allowRemoteScreenObservation pfm_title Allow Remote Screen Observation pfm_description Allow Classroom or similar to observe the screen pfm_type boolean pfm_default pfm_name forceClassroomUnpromptedScreenObservation pfm_title Allow Classroom Screen Observation without Prompting pfm_description Supervised only. If set to true, a student enrolled in a course via Classroom will automatically give permission to that course's teacher’s requests to observe their screen without prompting the student. pfm_type boolean pfm_default pfm_name allowChat pfm_title Allow use of iMessage pfm_description Allow use of iMessage (Supervised only) pfm_type boolean pfm_default pfm_name allowBookstore pfm_title Allow Bookstore pfm_description Supervised only. If set to false, Apple Books will be disabled. pfm_type boolean pfm_default pfm_name allowBookstoreErotica pfm_title Allow Bookstore Erotica pfm_description Supervised only. If set to false, the user will not be able to download media from Apple Books that is tagged as erotica. pfm_type boolean pfm_default pfm_name allowMusicService pfm_title Allow Apple Music pfm_description If set to false, Apple Music will be disabled in the Music app. pfm_type boolean pfm_default pfm_name allowRadioService pfm_title Allow iTunes Radio pfm_description If set to false, iTunes Radio will be disabled in the Music app. pfm_type boolean pfm_default pfm_name allowSharedStream pfm_title Allow Shared Albums pfm_description If set to false, disabled Shared Albums. pfm_type boolean pfm_default pfm_name allowPassbookWhileLocked pfm_title Allow Wallet While Locked pfm_description If set to false, Wallet notifications will not be shown on the lock screen. pfm_type boolean pfm_default pfm_name allowUIConfigurationProfileInstallation pfm_title Allow UI Configuration Profile Installation pfm_description Supervised only. If set to false, the user is prohibited from installing configuration profiles and certificates interactively. pfm_type boolean pfm_default pfm_name allowVPNCreation pfm_title Allow Adding VPN Configurations (Supervised devices only) pfm_description Allow adding VPN configurations (Supervised devices only) pfm_type boolean pfm_default pfm_name forceClassroomUnpromptedAppAndDeviceLock pfm_title Allow Classroom to Lock to an App and Lock the Device without Prompting pfm_description Supervised only. If set to true, a student enrolled in a course via Classroom will automatically give permission to that course's teacher’s requests to lock to an app or lock the device without prompting the student. pfm_type boolean pfm_default pfm_name forceClassroomAutomaticallyJoinClasses pfm_title Automatically Join Classroom Classes without Prompting pfm_description Supervised only. If set to true, a student enrolled in a course via Classroom will automatically give permission to that course's teacher’s requests to perform commands without prompting the student. pfm_type boolean pfm_default pfm_name forceClassroomRequestPermissionToLeaveClasses pfm_title Require teacher permission to leave Classroom unmanaged classes pfm_description Supervised only. If set to true, a student enrolled in an ad-hoc course via Classroom will request permission from the teacher when attempting to leave the course. Defaults to false. pfm_type boolean pfm_default pfm_name forceWiFiPowerOn pfm_type boolean pfm_default pfm_name allowiTunes pfm_title Allow use of iTunes pfm_description Allow the user to access and use iTunes pfm_type boolean pfm_default pfm_name allowNews pfm_title Allow use of News pfm_description Allow the user to access and use News pfm_type boolean pfm_default pfm_name allowSafari pfm_title Allow use of Safari pfm_description Allow the user to use Safari pfm_type boolean pfm_default pfm_name allowGameCenter pfm_title Allow Game Center pfm_description Allow Game Center (Supervised only) pfm_type boolean pfm_default pfm_name allowAddingGameCenterFriends pfm_title Allow Adding Game Center Friends pfm_description Allow the user to add Friends on Game Center pfm_type boolean pfm_default pfm_name allowBluetoothModification pfm_title Allow modifying Bluetooth settings pfm_description Allow modifying Bluetooth settings pfm_type boolean pfm_default pfm_name allowAppCellularDataModification pfm_title Allow Modifying Cellular Data Usage for Apps Settings pfm_description Allow modifying cellular data usage for apps settings pfm_type boolean pfm_default pfm_name allowCellularPlanModification pfm_title Allow Modifying Cellular Plan pfm_description Allow modifying cellular plan (Supervised only) pfm_type boolean pfm_default pfm_name allowESIMModification pfm_title Allow Modifying eSIM Settings pfm_description Allow modifying eSIM settings (Supervised only) pfm_type boolean pfm_default pfm_name allowDeviceNameModification pfm_title Allow Modifying Device Name pfm_description Allow modifying device name pfm_type boolean pfm_default pfm_name allowPasscodeModification pfm_title Allow Modifying Passcode pfm_description Allow modifying passcode (Supervised only) pfm_type boolean pfm_default pfm_name allowWallpaperModification pfm_title Allow Modifying Wallpaper pfm_description Allow modifying Wallpaper (Supervised only) pfm_type boolean pfm_default pfm_name allowPersonalHotspotModification pfm_title Allow Modifying Personal Hotspot settings pfm_description Allow modifying Personal Hotspot settings (Supervised only) pfm_type boolean pfm_default pfm_name allowEnablingRestrictions pfm_title Allow Configuring Restrictions pfm_description Allow configuring restrictions (Supervised only) pfm_type boolean pfm_default pfm_name allowGlobalBackgroundFetchWhenRoaming pfm_title Allow Automatic Sync While Roaming pfm_description Allow automatic sync while roaming pfm_type boolean pfm_default pfm_name allowFilesUSBDriveAccess pfm_type boolean pfm_default pfm_name allowManagedAppsCloudSync pfm_title Allow iCloud Sync for Managed Apps pfm_description Allow iCloud sync for managed apps pfm_type boolean pfm_default pfm_name allowEnterpriseBookBackup pfm_title Allow Enterprise Books Backup pfm_description Allow enterprise books to be backed up pfm_type boolean pfm_default pfm_name allowEnterpriseBookMetadataSync pfm_title Allow Enterprise Books Notes and Highlights Sync pfm_description Allow enterprise books notes and highlights to be synced pfm_type boolean pfm_default pfm_name allowInAppPurchases pfm_title Allow In App Purchases pfm_description Allow the user to make purchases within applications pfm_type boolean pfm_default pfm_name allowMultiplayerGaming pfm_title Allow Multiplayer Gaming pfm_description Allow multiplayer gaming pfm_type boolean pfm_default pfm_name allowVideoConferencing pfm_title Allow Video Conferencing pfm_description Allow video conferencing pfm_type boolean pfm_default pfm_name allowVoiceDialing pfm_title Allow Voice Dialing While Device is Locked pfm_description Allow voice dialing while device is locked (deprecated in iOS 17) pfm_type boolean pfm_default pfm_name forceEncryptedBackup pfm_title Force Encrypted Backups pfm_description Force encrypted backups pfm_type boolean pfm_default pfm_name forceWatchWristDetection pfm_title Force Apple Watch Wrist Detection pfm_description Force Apple Watch wrist detection pfm_type boolean pfm_default pfm_name allowPairedWatch pfm_title Allow Pairing With Apple Watch pfm_description Allow pairing with Apple Watch pfm_type boolean pfm_default pfm_name allowEraseContentAndSettings pfm_title Allow Erase All Content and Settings pfm_description Supervised only. If set to false, the user cannot choose the option "Erase All Content and Settings" in Settings > General > Reset pfm_type boolean pfm_default pfm_name allowSpotlightInternetResults pfm_title Allow Internet results in Spotlight pfm_description If set to false, search results from the web will not be shown in Spotlight. pfm_type boolean pfm_default pfm_name allowCloudDocumentSync pfm_title Allow iCloud Document Sync pfm_description Allow document syncing with iCloud pfm_type boolean pfm_default pfm_name allowUntrustedTLSPrompt pfm_title Allow user to accept untrusted TLS certificates pfm_description Allow user to accept untrusted TLS certificates pfm_type boolean pfm_default pfm_name allowDiagnosticSubmission pfm_title Allow diagnostic submission pfm_description Send diagnostic and usage reports to Apple pfm_type boolean pfm_name allowDiagnosticSubmissionModification pfm_title Allow modifying diagnostics settings pfm_description Allow modifying diagnostics settings pfm_type boolean pfm_name allowPhotoStream pfm_title Allow Photo Stream pfm_description Allow Photo Stream to be used on the device (deprecated in iOS 17) pfm_type boolean pfm_default pfm_name allowCloudPhotoLibrary pfm_title Allow iCloud Photos pfm_description Allow iCloud Photos to be used on the device pfm_type boolean pfm_default pfm_name allowCloudBackup pfm_title Allow iClould Backup pfm_description Allow backup using iCloud pfm_type boolean pfm_default pfm_name forceITunesStorePasswordEntry pfm_title Require iTunes password for all purchases pfm_description Require the user's iTunes password to be entered for every purchase (deprecated in iOS 17) pfm_type boolean pfm_default pfm_name ratingApps pfm_title Apps Ranking Number pfm_description Ranking number for apps pfm_type integer pfm_default 1000 pfm_name ratingMovies pfm_title Movies Ranking Number pfm_description Ranking number for movies pfm_type integer pfm_default 1000 pfm_name ratingTVShows pfm_title TV Shows Ranking Number pfm_description Ranking number for TV Shows pfm_type integer pfm_default 1000 pfm_name ratingRegion pfm_title Region Code pfm_description Two-character code for the region used to specify ratings pfm_type string pfm_range_list us au ca de fr ie jp nz gb pfm_name safariAcceptCookies pfm_title Accept Cookies in Safari pfm_description Accept cookies: 0 - Never, 1 - From current website only (iOS 8) or visited sites (pre-iOS 8), 1.5 - From websites I visit, 2 - Always pfm_type real pfm_range_list 0 1 1.5 2 pfm_default 2 pfm_name safariAllowAutoFill pfm_title Allow AutoFill in Safari pfm_description Allow AutoFill in Safari pfm_type boolean pfm_default pfm_name forceAuthenticationBeforeAutoFill pfm_title Require Face ID authentication before AutoFill pfm_description Supervised only. Requires Face ID authentication before allowing AutoFill. pfm_type boolean pfm_default pfm_name safariAllowJavaScript pfm_title Allow JavaScript pfm_description Allow JavaScript in Safari pfm_type boolean pfm_default pfm_name safariAllowPopups pfm_title Allow Pop-ups pfm_description Allow Pop-ups in Safari pfm_type boolean pfm_default pfm_name safariForceFraudWarning pfm_title Enable Fraud Warning pfm_description Enable fraud warning in Safari pfm_type boolean pfm_default pfm_name allowAssistant pfm_title Allow Siri pfm_description Allow Siri pfm_type boolean pfm_default pfm_name allowAssistantWhileLocked pfm_title Allow Siri While Locked pfm_description Allow Siri while device is locked pfm_type boolean pfm_default pfm_name forceAssistantProfanityFilter pfm_title Enable Siri Profanity Filter pfm_description Enable Siri Profanity Filter (Supervised devices only) pfm_type boolean pfm_default pfm_name allowPredictiveKeyboard pfm_title Allow Predictive Keyboard pfm_description Allow Predictive Keyboard (Supervised devices only) pfm_type boolean pfm_default pfm_name allowKeyboardShortcuts pfm_title Allow Keyboard Shortcuts pfm_description Allow Keyboard Shortcuts (Supervised devices only) pfm_type boolean pfm_default pfm_name allowContinuousPathKeyboard pfm_title Allow continuous path keyboard pfm_description Allow continuous path keyboard (supervised only) pfm_type boolean pfm_default pfm_name allowAutoCorrection pfm_title Allow Auto Correction pfm_description Allow Auto Correction (Supervised devices only) pfm_type boolean pfm_default pfm_name allowSpellCheck pfm_title Allow Spell Check pfm_description Allow Spell Check (Supervised devices only) pfm_type boolean pfm_default pfm_name allowDefinitionLookup pfm_title Allow Define pfm_description Allow Define (Supervised devices only) pfm_type boolean pfm_default pfm_name allowOpenFromUnmanagedToManaged pfm_title Enable allow open from unmanaged to managed pfm_description Enable allow open from unmanaged to managed pfm_type boolean pfm_default pfm_name allowOpenFromManagedToUnmanaged pfm_title Enable allow open from managed to unmanaged pfm_description Enable allow open from managed to unmanaged pfm_type boolean pfm_default pfm_name forceAirDropUnmanaged pfm_title Treat AirDrop as Unmanaged Destination pfm_description Treat AirDrop as Unmanaged Destination pfm_type boolean pfm_default pfm_name allowActivityContinuation pfm_title Allow Handoff pfm_description If set to false, Handoff will be disabled pfm_type boolean pfm_default pfm_name allowFingerprintForUnlock pfm_title Allow Touch ID / Face ID to Unlock Device pfm_description Allow Touch ID / Face ID to Unlock Device pfm_type boolean pfm_default pfm_name allowFingerprintModification pfm_title Allow Modifying Touch ID Fingerprints / Face ID Faces pfm_description Allow Modifying Touch ID fingerprints / Face ID faces pfm_type boolean pfm_default pfm_name allowNotificationsModification pfm_title Allow Modifying Notifications Settings pfm_description Allow Modifying Notifications Settings pfm_type boolean pfm_default pfm_name allowAirPlayIncomingRequests pfm_title Allow incoming AirPlay requests pfm_description Allow incoming AirPlay requests pfm_type boolean pfm_default pfm_name allowDeviceSleep pfm_title Allow device sleep pfm_description Allow device sleep pfm_type boolean pfm_default pfm_name allowRemoteAppPairing pfm_title Allow pairing with Remote app pfm_description Allow pairing with Remote app pfm_type boolean pfm_default pfm_name forceWiFiWhitelisting pfm_title Join only Wi-Fi networks installed by a Wi-Fi payload (supervised only) pfm_description Join only Wi-Fi networks installed by a Wi-Fi payload (supervised only) pfm_type boolean pfm_default pfm_name allowProximitySetupToNewDevice pfm_title Allow setting up new nearby devices (supervised only) pfm_description Allow users to be prompted to set up a new device that is close by (supervised only) pfm_type boolean pfm_default pfm_name allowDictation pfm_title Allow dictation pfm_description Allow dictation pfm_type boolean pfm_default pfm_name allowAirPrint pfm_title Allow AirPrint pfm_description Allow AirPrint (Supervised devices only) pfm_type boolean pfm_default pfm_name allowAirPrintiBeaconDiscovery pfm_title Allow discovery of AirPrint printers using iBeacons pfm_description Allow discovery of AirPrint printers using iBeacons (Supervised devices only) pfm_type boolean pfm_default pfm_name allowAirPrintCredentialsStorage pfm_title Allow storage of AirPrint credentials in Keychain pfm_description Allow storage of AirPrint credentials in Keychain (Supervised devices only) pfm_type boolean pfm_default pfm_name forceAirPrintTrustedTLSRequirement pfm_title Disallow AirPrint to destinations with untrusted certificates pfm_description Disallow AirPrint to destinations with untrusted certificates (Supervised devices only) pfm_type boolean pfm_default pfm_name blacklistedAppBundleIDs pfm_title Blacklisted Apps pfm_description Blacklisted Apps pfm_type array pfm_subkeys pfm_name appBundleID pfm_title Blacklisted App pfm_description Blacklisted App pfm_type string pfm_default pfm_name whitelistedAppBundleIDs pfm_title Whitelisted Apps pfm_description Whitelisted Apps pfm_type array pfm_subkeys pfm_name appBundleID pfm_title Whitelisted App pfm_description Whitelisted App pfm_type string pfm_default pfm_name forceDelayedSoftwareUpdates pfm_title Defer software updates pfm_description Delay user visibility of Software Updates pfm_type boolean pfm_default pfm_name forceAutomaticDateAndTime pfm_title Force Automatic Date and Time pfm_description When set to true, the Date and Time "Set Automatically" feature is turned on and cannot be turned off by the user. pfm_type boolean pfm_default pfm_name allowPasswordAutoFill pfm_title Allow Password AutoFill pfm_description When set to false, users cannot use the AutoFill Passwords feature on iOS. Users will not be prompted with the option to pick a saved password to use in password fields in Safari or in apps. pfm_type boolean pfm_default pfm_name allowPasswordProximityRequests pfm_title Allow proximity based password sharing requests pfm_description When set to false, user’s devices will not advertise themselves to nearby devices to share passwords using Proximity AutoFill. pfm_type boolean pfm_default pfm_name allowPasswordSharing pfm_title Allow Password Sharing pfm_description When set to false, users cannot share their passwords using AirDrop pfm_type boolean pfm_default pfm_name enforcedSoftwareUpdateDelay pfm_title Defer software updates pfm_description Number of days to delay user visibility of Software Updates pfm_type integer pfm_exclude pfm_target_conditions pfm_target forceDelayedSoftwareUpdates pfm_n_range_list pfm_name allowAutoUnlock pfm_type boolean pfm_default pfm_name allowUSBRestrictedMode pfm_title Allow USB accessories while device is locked pfm_description Allow USB accessories to connect while the device is locked pfm_type boolean pfm_default pfm_name allowFindMyDevice pfm_title Allow Find My Devices pfm_description Allow Find My Devices pfm_type boolean pfm_default pfm_name allowFindMyFriends pfm_title Allow Find My Friends pfm_description Allow Find My Friends pfm_type boolean pfm_default pfm_name allowFilesNetworkDriveAccess pfm_type boolean pfm_default pfm_name allowAppClips pfm_type boolean pfm_default pfm_name allowApplePersonalizedAdvertising pfm_type boolean pfm_default pfm_name forceLimitAdTracking pfm_type boolean pfm_default pfm_name allowUnpairedExternalBootToRecovery pfm_type boolean pfm_default pfm_name forcePreserveESIMOnErase pfm_type boolean pfm_default pfm_name allowLiveVoicemail pfm_title Allow Live Voicemail pfm_description Allow Live Voicemail (supervised only) pfm_type boolean pfm_default pfm_name allowMarketplaceAppInstallation pfm_title Allow App Installation from Marketplaces pfm_description Allow installing marketplace apps and marketplace-hosted apps (supervised only) pfm_type boolean pfm_default pfm_name allowPersonalizedHandwritingResults pfm_title Allow Personalized Handwriting Results pfm_description Allow personalized handwriting generation (supervised only) pfm_type boolean pfm_default pfm_name allowImagePlayground pfm_title Allow Image Playground pfm_description Allow Image Playground (supervised only) pfm_type boolean pfm_default pfm_name allowESIMOutgoingTransfers pfm_title Allow eSim Transfers pfm_description Allow transferring eSIM to another device (supervised only) pfm_type boolean pfm_default