Device management payload list for Apple Vision Pro devices

Payload settings for Apple Vision Pro devices are detailed in the table below, which contains the following columns. Before you review the table below, understand what each column contains.

Note: Apple Vision Pro devices with visionOS 1.1, if payloads have the same account description (or display name), they’re treated as exclusive payloads.

Supported payload name and identifiers: This column notes the name of the payload and the identifiers. If you’re using a device management service, the payload name may be different, but the identifiers are the same.
Supported enrollment methods: User Enrollment and Device Enrollment. For more information, see Enrollment methods for Apple devices.
Duplicates allowed: This column notes whether one specified payload (FALSE) or more than one specified payload (TRUE) can be delivered to a user or device. For example, you can add more than one Subscribed Calendars payload to a single configuration profile. This allows you to subscribe the user to, in this case, more than one calendar.

Note: Not all payloads and their respective settings are available in all device management services. To learn which configurations and payloads are available for your devices, consult your developer’s device management service documentation.

Payload and identifiers	Supported enrollment method	Duplicates allowed
App-LayerVPN com.apple.vpn.managed.applayer	User Device Automated Device	FALSE
Automated Certificate Management Environment (ACME) com.apple.security.acme	User Device Automated Device	TRUE
Calendar com.apple.caldav.account	User Device Automated Device	TRUE
Certificate Revocation com.apple.security.certificaterevocation	User Device Automated Device	TRUE
Certificate Transparency com.apple.security.certificatetransparency	User Device Automated Device	TRUE
Certificates com.apple.security.pem com.apple.security.pkcs1 com.apple.security.pkcs12 com.apple.security.root	User Device Automated Device	TRUE
Contacts com.apple.carddav.account	User Device Automated Device	TRUE
DNS Proxy com.apple.dnsProxy.managed Requires a device management service to install.	Device Automated Device	FALSE
DNS Settings com.apple.dnsSettings.managed	Device Automated Device	TRUE
Domains com.apple.domains	Device Automated Device	FALSE
Exchange ActiveSync (EAS) com.apple.eas.account	User Device Automated Device	TRUE
Extensible Single Sign-On com.apple.extensiblesso Requires a device management service to install.	User Device Automated Device	TRUE
Extensible Single Sign-On Kerberos com.apple.extensiblesso(kerberos) Requires a device management service to install.	User Device Automated Device	TRUE
Google Accounts com.apple.google-oauth	User Device Automated Device	TRUE
LDAP com.apple.ldap.account	User Device Automated Device	TRUE
Mail com.apple.mail.managed	User Device Automated Device	TRUE
Passcode com.apple.mobiledevice.passwordpolicy	User Device Automated Device	TRUE
Relay com.apple.relay.managed	Device Automated Device	TRUE
Restrictions com.apple.applicationaccess	User Device Automated Device	TRUE
SCEP com.apple.security.scep	User Device Automated Device	TRUE
Subscribed Calendars com.apple.subscribedcalendar.account	User Device Automated Device	TRUE
VPN com.apple.vpn.managed	User (App-Layer VPN and App-to-App Layer VPN mapping only) Device Automated Device	TRUE
Web Content Filter com.apple.webcontent-filter	Device Automated Device	TRUE
Wi-Fi com.apple.MCX(WiFi) com.apple.builtinwireless.managed com.apple.wifi.managed	User Device Automated Device	TRUE

Payload and identifiers

Supported enrollment method

Duplicates allowed

App-LayerVPN

com.apple.vpn.managed.applayer

User

Device

Automated Device

FALSE

Automated Certificate Management Environment (ACME)

com.apple.security.acme

User