(Shared iPad - Guest) Types and Details of Profile Settings
This page lists the restriction items you can configure in a Shared iPad profile and the settings on managed devices that can be distributed together with the profile, and explains what each item does.
Restrictions (Functionality)
| Restriction | Default | Description | Target version |
|---|---|---|---|
| Allow use of camera | On | If you turn this option off, the camera is disabled and the Camera icon is removed from the Home Screen. Users cannot take photos or videos or use FaceTime. | |
| Allow FaceTime | On | If you turn this option off, users cannot make or receive FaceTime audio or video calls. | |
| Allow screenshots and screen recording | On | If you turn this option off, users cannot save screenshots or screen recordings. | |
| Allow AirPlay, viewing screen by Classroom, and screen sharing | On | If you turn this option off, teachers using Classroom cannot use AirPlay on or view the screens of students' iPad devices. | |
| Allow Classroom to perform AirPlay and View Screen without prompting | If you turn this option on, students are not notified when a teacher uses AirPlay or views the screen on a student's iPad in a managed class. | ||
| Allow AirDrop | On | If you turn this option off, users cannot use AirDrop. | |
| Allow iMessage | On | If you turn this option off on a device that has only Wi-Fi, the Messages app is hidden. If you turn this option off on a device that has both Wi-Fi and cellular, the Messages app can still be used, but only the SMS/MMS service is available. | |
| Allow Apple Music | On | If you turn this option off, users cannot use Apple Music. The Music app runs in classic mode. | |
| Allow Radio | On | If you turn this option off, users cannot listen to radio in Apple Music. | |
| Allow voice dialing while device is locked | On | If you turn this option off, users cannot use voice control to make phone calls while the managed device is locked. | |
| Allow Siri | On | If you turn this option off, users cannot use Siri. | |
| Allow Siri while device is locked | On | If you turn this option off, Siri responds only while the managed device is unlocked. If no passcode is set on the managed device, this restriction is ignored. | |
| Enable Siri profanity filter | If you turn this option off, the Siri profanity filter is disabled. | ||
| Show user-generated content in Siri | On | If you turn this option off, Siri cannot access content from sources that allow user-generated content (such as Wikipedia). | |
| Allow Siri Suggestions | On | If you turn this option off, Siri cannot offer suggestions for apps, people, places, and so on while the user searches. | |
| Allow Apple Books | On | If you turn this option off, Apple Books is disabled and users cannot use Apple Books from the Books app. | |
| Allow installing apps | On | If you turn this option off, the App Store is disabled and its icon is removed from the Home Screen. Users cannot install apps using Apple Configurator or iTunes. | |
| Allow installing apps from the Store | On | If you turn this option off, the App Store icon is hidden and cannot be used. Host applications (iTunes, Configurator) can still be used to install or update apps. | |
| Allow automatic app downloads | On | If you turn this option off, applications purchased on other devices are no longer downloaded automatically. | |
| Allow app removal | On | If you turn this option off, users cannot delete installed applications. | |
| Allow system app removal | On | If you turn this option off, users cannot delete the built-in applications made by Apple. Note: To apply this restriction, you must restart the managed device once after the profile is installed. | |
| Allow App Clips | On | If you turn this option off, users cannot add App Clips. When this restriction is applied, existing App Clips are removed. | iOS 14.0 or later |
| Allow in-app purchases | On | If you turn this option off, users cannot make in-app purchases. | |
| Require iTunes Store password for all purchases | If you turn this option on, users are no longer asked to enter the account password for in-app purchases and iTunes purchases. | ||
| Allow iCloud backup | On | If you turn this option off, backups of the managed device are performed only with iTunes. | |
| Allow iCloud documents and data | On | If you turn this option off, documents and data are no longer added to iCloud. | |
| Allow iCloud Keychain | On | If you turn this option off, users cannot use iCloud Keychain. | |
| Allow managed apps to store data in iCloud | On | If you turn this option off, users cannot store managed app data in iCloud. | |
| Allow backup of enterprise books | On | If you turn this option off, users cannot back up books distributed by the organization to iCloud or iTunes. | |
| Allow sync of enterprise books notes and highlights | On | If you turn this option off, users cannot sync notes and highlights to other devices using iCloud. | |
| Allow Shared Albums | On | If you turn this option off, users cannot subscribe to or publish shared photo albums. | |
| Allow iCloud Photos | On | If you turn this option off, users cannot use iCloud Photo Library. | |
| Allow My Photo Stream (data may be lost if not allowed) | On | If you turn this option off, photos in My Photo Stream are erased from the managed device, photos saved to the Camera Roll are no longer sent to My Photo Stream, and photos and videos in shared streams cannot be viewed on the managed device.Important: These photos and videos may be lost if no other copies exist. | |
| Allow automatic sync while roaming | On | If you turn this option off, a managed device that is roaming syncs only when the user accesses an account. | |
| Allow USB drive access in the Files app | On | If you turn this option off, access from the Files app to USB devices connected to the device is disabled. | |
| Allow network drive access in the Files app | On | If you turn this option off, access to network drives in the Files app is disabled. | |
| Force encrypted backups | If you turn this option on, users can no longer choose whether to store device backups created with iTunes in encrypted form on their Mac. If the profile is encrypted and this option is off, backup encryption is required and enforced by iTunes. Profiles installed on a device with Profile Manager are never encrypted. | ||
| Allow apps to request to track | On | If you turn this option off, tracking requests from apps in the privacy settings are disabled. | iOS 14.0 or later |
| Allow Apple personalized advertising | On | If you turn this option off, Apple's advertising platform does not use the user's data to deliver personalized ads. | iOS 14.0 or later |
| Allow Erase All Content and Settings | On | If you turn this option off, the Erase All Content and Settings option is disabled. | |
| Allow users to accept untrusted TLS certificates | On | If you turn this option off, users are not asked whether to trust certificates that cannot be verified. This setting applies to Safari, Mail, Contacts, and Calendar accounts. If you turn this option on, only certificates that chain to a trusted root certificate are accepted, and no message is displayed. | |
| Allow automatic updates to certificate trust settings | On | If you turn this option off, certificate trust settings are no longer updated automatically. | |
| Allow trusting new enterprise app authors | On | If you turn this option off, users cannot trust new enterprise app authors, and apps from those authors are prevented from launching. | |
| Allow installing configuration profiles | On | If you turn this option off, users cannot manually install configuration profiles. | |
| Allow adding VPN configurations | On | If you turn this option off, users cannot create or add VPN configurations. | |
| Force automatic date and time | If you turn this option on, Set Automatically for date and time is turned on, and users cannot turn it off. | ||
| Allow Classroom to lock apps and devices without prompting | If you turn this option on, teachers can lock an app in the foreground or lock the managed device without first prompting the user. | ||
| Automatically join Classroom classes without prompting | If you turn this option on, students can join classes without prompting the teacher. | ||
| Require teacher permission to leave unmanaged Classroom classes | If you turn this option on, students must request permission before leaving an unmanaged (teacher-created) class. | ||
| Force Wi-Fi power on | If you turn this option on, Wi-Fi is forced to stay on. | iOS 13/iPadOS 13.1 or later | |
| Allow NFC | On | If you turn this option off, users cannot use near field communication. | iOS 14.2 or later |
| Allow modifying account settings | On | If you turn this option off, users cannot create new accounts or change settings associated with an account, such as the user name and password. | |
| Allow modifying Bluetooth settings | On | If you turn this option off, users cannot change Bluetooth settings. | |
| Allow modifying cellular data app settings | On | If you turn this option off, users cannot change the settings of apps that use cellular data. | |
| Allow modifying cellular plan settings | On | If you turn this option off, users cannot change cellular plan settings. | |
| Allow modifying eSIM settings | On | If you turn this option off, users cannot add or remove eSIM plans on an iPhone that supports eSIM. | |
| Allow modifying device name | On | If you turn this option off, users cannot change the device name displayed in Settings > General > About. | |
| Allow modifying notification settings | On | If you turn this option off, users cannot change notification settings. | |
| Allow modifying passcode | On | If you turn this option off, users cannot change the passcode that has been set. | |
| Allow modifying Touch ID fingerprint/Face ID face data | On | If you turn this option off, users cannot add Touch ID/Face ID information or delete existing information. | |
| Allow Screen Time | On | If you turn this option off, users cannot set their own restrictions or Screen Time on the managed device. | |
| Allow modifying wallpaper | On | If you turn this option off, users cannot change the Lock Screen or Home Screen wallpaper. | |
| Allow modifying Internet Sharing settings | On | If you turn this option off, users cannot change Internet Sharing settings. | iOS 12.2/iPadOS 13.1 or later |
| Allow Find My Friends | On | If you turn this option off, users cannot turn on the features of the Find My Friends app. | |
| Allow Find My Device in Find My | On | If you turn this option off, users cannot turn on the features of the Find My Device app. | |
| Allow modifying Find My Friends settings | On | If you turn this option off, users cannot change or update the settings of the Find My Friends app. | |
| Allow USB accessories while device is locked | If you turn this option on, users can allow USB accessories to always access the iOS device. | ||
| Allow pairing with non-Configurator hosts | On | If you turn this option off, users cannot pair the iOS device with any device other than the Mac with Apple Configurator installed that first supervised the device. If no supervision host certificate is set, all pairing is disabled. | |
| Allow documents from managed sources in unmanaged destinations | On | If you turn this option off, documents created or downloaded from managed sources cannot be opened in unmanaged destinations. | |
| Allow documents from unmanaged sources in managed destinations | On | If you turn this option off, documents created or downloaded from unmanaged sources cannot be opened in managed destinations. | |
| Include copy & paste in restrictions | If you turn this option on, copy & paste is included in the scope of the following items.
| iOS 15.0 or later | |
| Treat AirDrop as an unmanaged destination | If you turn this option on, AirDrop from managed apps is no longer shown to users as an option. To turn on and enforce this restriction, you must also turn off Allow documents from managed sources in unmanaged destinations. | ||
| Allow Handoff | On | If you turn this option off, users cannot use Handoff on their Apple devices. | |
| Allow sending diagnostic and usage data to Apple | On | If you turn this option off, users cannot choose to send diagnostic information to Apple. | |
| Allow modifying diagnostics settings | On | If you turn this option off, users cannot change the diagnostic data settings. | |
| Allow unlocking device with Touch ID | On | If you turn this option off, users cannot use Touch ID to unlock the managed device. | |
| Allow password AutoFill | On | If you turn this option off, users cannot use password AutoFill, and are no longer asked whether to retrieve saved passwords from iCloud Keychain or third-party password managers. | |
| Require Touch ID/Face ID authentication before AutoFill | If you turn this option on, users are asked to authenticate when they try to AutoFill password or credit card information in Safari or apps. If this restriction is not set, users can toggle this feature in Settings. Supported only on devices that support Face ID. | ||
| Force Apple Watch wrist detection | If you turn this option on, Apple Watch locks automatically when it is removed from the user's wrist. It can be unlocked with the passcode or the paired iPhone. | ||
| Allow pairing with Apple Watch | On | If you turn this option off, users cannot pair an Apple Watch with a supervised iPhone. | |
| Require passcode on first AirPlay pairing | If you turn this option on, a passcode is required the first time an iOS device or Apple TV pairs to use AirPlay. | ||
| Join only Wi-Fi networks installed by a Wi-Fi payload | If you turn this option on, the managed device can connect only to Wi-Fi networks configured and distributed with the Wi-Fi payload of the profile. | ||
| Allow setting up new nearby devices | On | If you turn this option off, users cannot use an Apple device to set up or configure other Apple devices. | |
| Allow proximity-based password sharing requests | On | If you turn this option off, the user's device cannot expose passwords to nearby devices using AutoFill to nearby devices. On iOS and macOS, this feature restricts only Wi-Fi password requests. | |
| Allow password sharing | On | If you turn this option off, users cannot share passwords. | |
| Allow AirPrint | On | If you turn this option off, users cannot use AirPrint. | |
| Allow iBeacon discovery of AirPrint printers | On | If you turn this option off, users cannot use nearby iBeacons to discover AirPrint printers. | |
| Allow storing AirPrint credentials in Keychain | On | If you turn this option off, users cannot store AirPrint credentials in Keychain. | |
| Disallow AirPrint to destinations with untrusted certificates | If you turn this option on, users cannot use AirPrint to print to printers whose certificates are not trusted. | ||
| Allow predictive keyboard | On | If you turn this option off, the predictive keyboard is no longer shown to users. | |
| Allow keyboard shortcuts | On | If you turn this option off, users cannot use keyboard shortcuts. | |
| Allow continuous path keyboard | On | If you turn this option off, users cannot use the continuous path keyboard. | |
| Allow auto-correction | On | If you turn this option off, word correction suggestions are no longer shown to users. | |
| Allow spell check | On | If you turn this option off, possibly misspelled words are no longer underlined in red. | |
| Allow definition lookup | On | If you turn this option off, users cannot double-tap a word to look up its definition. | |
| Allow dictation | On | If you turn this option off, users cannot use dictation. | |
| Allow Wallet notifications on Lock Screen | On | If you turn this option off, users must unlock the managed device to use Wallet. | |
| Show Control Center on Lock Screen | On | If you turn this option off, users cannot display Control Center by swiping up. | |
| Show Notification Center on Lock Screen | On | If you turn this option off, users no longer receive notifications while the screen is locked. | |
| Show Today view on Lock Screen | On | If you turn this option off, users cannot display Notification Center with the Today view on the Lock Screen by swiping down. | |
| Defer software updates: XX days | If you turn this option on, you can prohibit users from manually updating the device over a wireless connection for a specified period. When this restriction is applied, the deferral period is set to 30 days by default and can be changed to a value between 1 and 90 days. The deferral period starts counting down when the OS update is released. After the deferral period ends, users see a notification prompting them to update the OS. |
Restrictions (Apps)
| Restriction | Default | Description | Target version |
|---|---|---|---|
| Allow use of iTunes Store | On | If you turn this option off, the iTunes Store is disabled and its icon is removed from the Home Screen. Users cannot preview, purchase, or download content. | |
| Allow use of News | On | If you turn this option off, users cannot use the News app. | |
| Allow use of Podcasts | On | If you turn this option off, users cannot download podcasts. | |
| Allow use of Game Center | On | If you turn this option off, the Game Center app and its icon are removed. | |
| Allow multiplayer gaming | On | If you turn this option off, users cannot play multiplayer games in Game Center. | |
| Allow adding Game Center friends | On | If you turn this option off, users cannot search for or add friends in Game Center. | |
| Allow use of Safari | On | If you turn this option off, the Safari web browser app is disabled and its icon is removed from the Home Screen. Users also cannot open web clips. | |
| Enable AutoFill | On | If you turn this option off, Safari no longer remembers what users enter in web forms. | |
| Force fraud warning | On | If you turn this option on, Safari prevents users from visiting websites identified as fraudulent or unsafe. The default is off. | |
| Enable JavaScript | On | If you turn this option off, all JavaScript on websites is ignored. | |
| Block pop-ups | If you turn this option on, Safari blocks pop-ups. The default is off. | ||
| Accept cookies | Always | Sets the cookie policy for Safari. You can choose to always block all cookies, always accept all cookies, accept cookies only from the current website, or accept cookies from websites the user has visited. The default is Always. | |
| Restrict app usage (managed devices only) | Allow all apps | Allows the use of applications other than Settings or Phone that you add to the allowlist or blocklist.Do not allow some apps: a blocklist of applications that cannot be used Allow only some apps: an allowlist of applications that can be used |
Restrictions (Media Content)
| Item | Default | Details | Target version |
|---|---|---|---|
| Ratings region | United States | Select the ratings region from the following. - United States - Australia - Canada - Germany - France - Ireland - Japan - New Zealand - United Kingdom | |
| Allowed content ratings | Set the maximum rating to allow | Set the maximum rating to allow | |
| Movies | Allow all movies | Select an appropriate rating from the list of ratings for the country selected in Ratings region.If you select Do not allow movies, the corresponding movies no longer appear in Videos. - Do not allow movies - G - PG-12 - R-15 - R-18 - Allow all movies | |
| TV shows | Allow all TV shows | Select an appropriate rating from the list of ratings for the country selected in Ratings region.- Do not allow TV shows - Explicit Allowed - Allow all TV shows | |
| Apps | Allow all apps | Select from the following. - Do not allow apps - 4+, 9+, 12+ - 17+ - Allow all apps | |
| Allow explicit music, podcasts, and iTunes U media | On | If you turn this option off, explicit music and video content purchased from the iTunes Store or listed in iTunes U is hidden. Whether content is explicit is specified by the content provider (such as a record label) when the content is sold in the iTunes Store or distributed in iTunes U. | |
| Allow explicit sexual content in iBooks Store books | On | If you turn this option off, content with explicit sexual material purchased from the iBooks Store is hidden. Whether content is explicit is specified by the content provider when the content is sold in the iBooks Store. |
Web Clips
| Item | Default | Details | Target version |
|---|---|---|---|
| Label | Enter the name of the Web Clip displayed on the Home Screen. (Required) | ||
| URL | Specify the URL to open when the Web Clip is tapped. (Required) The URL must start with HTTP or HTTPS. | ||
| Third-party browser app | Enter the identifier of the app used to open the URL (example for Chrome: com.google.chrome.ios). If left blank, Safari is used. | iOS 14 or later | |
| Allow removal | If on, the Web Clip cannot be removed from the managed device. | ||
| Icon | Specify the icon displayed on the Home Screen. If none is specified, a white rectangle is displayed. PNG and JPG files up to 1 MB are supported. | ||
| Precomposed icon | If on, the icon is displayed without visual effects. | ||
| Full screen | If on, the Web Clip is displayed as a full-screen application. | ||
| Ignore manifest scope | If on, web pages not included in the manifest are allowed to load in full-screen mode. |