iOS Restrictions
iOS restrictions are settings that help the primary user of the device control what other users are allowed to do with an iOS device. These settings are defined by Apple and managed by Ivanti Neurons for MDM.
During the distribution of this configuration to Shared iPads, you can select either the Device Channel or the User Channel . This is useful to distribute separate configurations and enforce restrictions that are applicable only to the device or the user channel.
iOS restrictions settings
Category |
Setting |
What To Do |
iCloud | iOS All Versions | Enable access to iCloud services. |
Allow backup |
Select to allow the device to back up data via Apple’s iCloud service. |
|
|
Allow document sync |
Select to allow documents to be synchronized via Apple’s iCloud service. |
|
Allow Photo Stream |
Select to allow photos to be synchronized to your other iOS devices via Apple’s iCloud. |
|
Allowed shared Photo Streams(disallowing can cause data loss) |
Select to allow synchronization of shared photos. Deselecting this option can result in loss of photos. |
|
Allow Keychain sync |
Select to allow synchronization of your keychain. |
|
iOS 9+ |
|
|
Allow iCloud Photo Library |
Select to allow access to iCloud photo library. |
|
iOS 15+ Supervised |
|
|
Allow cloud private relay |
If false, disables iCloud Private Relay. Default: true |
Category |
Setting |
What To Do |
---|---|---|
Security and Privacy |
iOS All Versions | Enable security and privacy policies. |
|
Allow over-the-air certificate updates |
Select to allow over-the-air updates of root certificates. |
|
Force limit ad tracking |
Select to require use of the limit ad tracking feature. |
|
iOS All Versions Supervised |
|
|
Allow configuration profile installation |
Select to allow users to install configuration profiles and certificates interactively. |
|
Allow assistant user generated content |
Select to allow Siri to query user-generated content from the web. |
|
iOS 8+ Supervised |
|
|
Allow user to erase all content and settings in Reset UI |
Select to enable the "Erase All Content And Settings" option in the iOS Reset UI on the device. |
|
Allow Screen Time |
Select to allow screen time (Settings > Screen Time). |
Allow diagnostic data to be sent to Apple |
Select to allow automatic submission of diagnostic data to Apple. |
|
|
Allow user to accept untrusted TLS certificates |
Select to allow the device user to accept untrusted HTTPS certificates. If this option is not selected, then the device will automatically reject untrusted HTTPS certificates without prompting the device user. |
|
Force encrypted backups |
Select to require encrypted backups via iTunes. Automatically selected due to SCEP requirements. |
|
Force user to enter iTunes Store password for all transactions |
Select to force device users to enter their iTunes password for each App Store transaction. If this option is not selected, then the device user can make multiple transactions on a single authentication. |
|
iOS 9+ |
|
|
Treat AirDrop as unmanaged destination |
Select to allow user access to AirDrop file sharing. Default: False |
|
iOS 9+ Supervised |
|
|
Allow modification of device passcode | Select to allow user to change the passcode for the device. |
iOS 12+ | ||
Allow managed apps to write contacts to unmanaged contact accounts |
Select to allow managed apps to write contacts to unmanaged contacts accounts. Default: False |
|
iOS 12+ Supervised | ||
Allow autofill passwords | Select to allow users to use the AutoFill Passwords feature on iOS and be prompted to use a saved password in Safari or in apps. | |
Allow nearby devices to share requests for a password | Select to allow user's device to request passwords from nearby devices. | |
Allow password sharing | Select to allow users to share their passwords with the Airdrop Passwords feature. | |
Allow unmanaged apps to read contacts from managed contact accounts |
Select to allow unmanaged apps to read from managed contacts accounts. Default: False |
Category |
Setting |
What To Do |
Content Ratings | Control access to apps and media. | |
|
Allow playback of explicit music, podcasts & iTunes U media (iOS 13+ Supervised only and tvOS 11.3 and later) |
Explicit content is marked as such by content providers, such as record labels, when sold through the iTunes Store. |
|
Ratings region |
Select a region from the drop-down list to change the region associated with the rating selections for applications, TV shows, and movies. |
|
Movies |
Select a rating limit for movies stored on the device:
|
|
TV Shows |
Select a rating limit for TV shows stored on the device:
|
|
Apps |
Select a rating limit for applications on the device:
|
For more information, see How to create a configuration