iOS Restrictions

Enter a name that identifies this configuration.

Select to allow synchronization of mail accounts while the device is outside of its home country.

Select to allow the personal assistant app to perform tasks even when the device is locked.

Select to allow users to dial a contact or number by talking to the device.

Select to allow Passbook notifications to display while the device is locked.

Select to allow notifications to be displayed on the lock screen.

Requires Gold license.

Select to allow documents in managed apps and accounts to be opened in unmanaged apps and accounts. Disabling this option prevents exchange of documents from managed to unmanaged apps and accounts. For example, you might want to keep enterprise documents from being opened with personal apps. You can also use this option (disable) together with a managed domains configuration to ensure that data downloaded from managed domains can only be opened in a managed app.

Select to require the Apple TV to display a passcode that the user must enter on the iOS device to authorize the initial pairing of the devices.

iOS All Versions Supervised

Select to allow users to download iBooks store material that has been tagged as erotica.

Select to allow users to make changes to cellular data settings for apps.

Select to allow host pairing for iTunes synchronization. In effect, enabling this option allows supervised devices to sync with iTunes on a Mac other than the supervision host. Disabling this option disables all host pairing with the exception of the supervision host. If no supervision host certificate has been configured, all pairing is disabled.

Enter comma separated list of bundle IDs for apps that can autonomously enter single app mode on iOS supervised devices. For example, you can specify custom exam apps for students. As soon as the student launches the app, the app enters single app mode to ensure that the student cannot use other resources while taking the exam. This feature applies to apps developed for autonomous single app mode. Supervision is established with Apple Configurator.

Select to allow personal backup of iBooks, ePub, and PDF documents that were pushed to the device using MDM.

Select to hide on-screen notifications unless someone is wearing the Apple Watch.

Select to allow users to enable iOS prediction of the word being typed, enabling users to tap one of three predictions to complete the word.

Select to allow use of spell check with Bluetooth keyboards.

Select to allow Touch ID or Face ID settings to be changed.

Select to allow use of keyboard shortcuts on the iPad.

Select to allow pairing of the iPhone with the Apple watch.

Select to allow user to modify the Bluetooth setting on supervised devices. Useful in such cases as shared iPads used for the Classroom app for Education where Bluetooth is required to run the app.

Select to allow the user to talk to the iPhone or iPad instead of typing.

Select to allow AirPrint feature for wireless printing.

Select to allow the user to set iBeacon discovery of AirPrint printers.

Select to allow trusted certificates for TLS printing communication.

Default: Deselected

Select to allow users to  modify cellular plan settings.

Select to allow users to automatically join classroom classes without any prompt.

Default: Deselected

Device owner must authenticate before passwords or credit card information can be auto filled in Safari browser and in applications.

Default: False

Select to enter the number of days by which you want to defer software updates. The default is 30 days, and the maximum is 90 days.

Default: Deselected

Select to allow user to modify the eSim configuration on supported devices. This option also prevents users from adding or removing a cellular plan in Settings on their devices.

Default: True

Select to allow the user to modify Personal Hotspot settings.

Default: True

Select to allow the user to connect to network drives in the Files app.

Default: True

iOS 13.0+ Supervised

Select to enable device sleeping.

Default: True

Select to enable Find My Friends in the Find My app.

Default: True

If true, disables connections to Siri servers for the purposes of dictation.

Default: false

If true, allows devices to be booted into recovery by an unpaired device.

Default: false

If true, copy and paste functionality respects the allowOpenFromManagedToUnmanaged and allowOpenFromUnmanagedToManaged restrictions.

Default: false

If false, disables Mail Privacy Protection on the device. Available in iOS 15.2 and later.

When the Allow Mail Privacy Protection configuration is installed and enabled from the Ivanti Neurons for MDM administrative portal, the Protect Mail Activity toggle is enabled on the device and the following options are visible:

• Hide IP Address - The email sender cannot link the email to your online activity or determine your location
• Block All Remote Content - Prevents the email sender from seeing your email activities

Default: true

If false, disables Apple TV’s automatic screen saver. Available in tvOS 15.4 and later.

Default: true

Select to enable the user to operate the camera. Deselect to disable the camera and remove its icon from the Home screen.

Select to turn on the autofill feature for fields displayed in Safari.

Select to turn on Javascript support for Safari.

Select to allow access to Game Center.

Select to allow users to play games that include other users.

Select Never, Always, or From Visited sites.

Select to allow activity continuation in apps supporting Handoff.

Select to allow use of Podcasts.

Select to allow user to access new enterprise apps.

Select to allow user access to the Apple App store.

Select to allow use of the News app.

Select to allow only bundle IDs listed in the array to be shown or launchable. Include the value com.apple.webapp to allow all webclips.