Device management payloads for Device Enrolment
Payloads can be used on various operating systems with users or devices. Payload information for Apple devices is detailed in the table below, which contains the following columns. Before you review the table below, understand what each column contains.
Supported payload name and identifiers: This column notes the name of the payload and the identifiers. If you’re using a device management service, the payload name may be different, but the identifiers are the same.
Supported operating systems and channels: This column notes the supported operating system and specifies whether the payload can be used for a device configuration profile or a user configuration profile. Because Shared iPad and Mac can have more than one user, a payload can be applied to the device channel (all users) or the user channel (specific users).
Duplicates allowed: This column notes whether one specified payload (FALSE) or more than one specified payload (TRUE) can be delivered to a user or device. For example, you can add more than one Subscribed Calendars payload to a single configuration profile. This allows you to subscribe the user to, in this case, more than one calendar.
Note: On devices with iOS and iPadOS, if payloads have the same account description (or display name), they’re treated as exclusive payloads.
Note: Not all payloads and their respective settings are available in all device management services. To learn which configurations and payloads are available for your devices, consult your developer’s device management service documentation.
Payload and identifiers | Supported operating systems and channels | Duplicates allowed |
|---|---|---|
com.apple.universalaccess | macOS device macOS user | FALSE |
com.apple.ADCertificate.managed | macOS device macOS user | TRUE |
com.apple.airplay | iOS iPadOS Shared iPad device macOS device macOS user | TRUE |
com.apple.airplay.security | tvOS | FALSE |
com.apple.airprint | iOS iPadOS Shared iPad device macOS device macOS user | TRUE |
com.apple.vpn.managed.applayer | iOS iPadOS Shared iPad device macOS device macOS user | FALSE |
com.apple.associated-domains | macOS device macOS user | TRUE |
Automated Certificate Management Environment (ACME) com.apple.security.acme | iOS iPadOS Shared iPad device macOS device macOS user tvOS | TRUE |
com.apple.asam | macOS device | FALSE |
com.apple.caldav.account | iOS iPadOS Shared iPad user macOS user | TRUE |
com.apple.security.certificatepreference | macOS user | TRUE |
com.apple.security.certificaterevocation | iOS iPadOS | TRUE |
com.apple.security.certificatetransparency | iOS iPadOS Shared iPad device macOS device tvOS watchOS | TRUE |
com.apple.security.pem com.apple.security.pkcs1 com.apple.security.pkcs12 com.apple.security.root | iOS iPadOS Shared iPad device macOS device macOS user tvOS watchOS | TRUE |
com.apple.carddav.account | iOS iPadOS Shared iPad user macOS user | TRUE |
com.apple.AssetCache.managed | macOS device | FALSE |
com.apple.DirectoryService.managed | macOS device | TRUE |
com.apple.dnsSettings.managed | iOS iPadOS Shared iPad device macOS device | TRUE |
com.apple.dock | macOS device macOS user | FALSE |
com.apple.domains | iOS iPadOS Shared iPad device Shared iPad user macOS device macOS user | FALSE |
com.apple.MCX | macOS device | TRUE |
com.apple.globalethernet.managed com.apple.firstactiveethernet.managed com.apple.firstethernet.managed com.apple.secondactiveethernet.managed com.apple.secondethernet.managed com.apple.thirdactiveethernet.managed com.apple.thirdethernet.managed | iOS iPadOS macOS device macOS user tvOS | FALSE |
com.apple.eas.account | iOS iPadOS Shared iPad user | TRUE |
com.apple.ews.account | macOS user | TRUE |
com.apple.extensiblesso Requires a device management service to install. | iOS iPadOS Shared iPad user macOS device macOS user | TRUE |
Extensible Single Sign-On Kerberos com.apple.extensiblesso(kerberos) Requires a device management service to install. | iOS iPadOS Shared iPad user macOS device macOS user | TRUE |
com.apple.NSExtension | macOS device macOS user | TRUE |
com.apple.MCX com.apple.MCX.FileVault2 com.apple.security.FDERecoveryKeyEscrow | macOS device | FALSE |
com.apple.finder | macOS device macOS user | FALSE |
com.apple.security.firewall | macOS device | TRUE |
com.apple.font | iOS iPadOS Shared iPad device macOS device macOS user | TRUE |
com.apple.google-oauth | iOS iPadOS Shared iPad user | TRUE |
com.apple.configurationprofile.identification | macOS device macOS user | FALSE |
com.apple.security.identitypreference | macOS user | TRUE |
com.apple.syspolicy.kernel-extension-policy Requires a device management service to install. | macOS device | TRUE |
com.apple.ldap.account | iOS iPadOS Shared iPad user macOS user | TRUE |
com.apple.lom Requires a device management service to install. | macOS device | FALSE |
com.apple.servicemanagement com.apple.loginitems.managed loginitems | macOS device macOS user | TRUE (Managed items) FALSE (Login items) |
com.apple.loginwindow com.apple.mcxloginscripts | macOS device | TRUE (Login Window) FALSE (Login scripts) |
com.apple.mail.managed | iOS iPadOS Shared iPad user macOS user | TRUE |
com.apple.cellular | iOS iPadOS Shared iPad device watchOS | FALSE |
com.apple.cellularprivatenetwork.managed | iOS iPadOS Shared iPad device | FALSE |
com.apple.SystemConfiguration | macOS device | FALSE |
com.apple.notificationsettings | iOS iPadOS Shared iPad device Shared iPad user macOS device macOS user | FALSE (iOS, iPadOS) TRUE (macOS) |
com.apple.applicationaccess.new com.apple.familycontrols.contentfilter com.apple.Dictionary com.apple.gamed com.apple.familycontrols.timelimits.v2 | macOS device macOS user | TRUE |
com.apple.mobiledevice.passwordpolicy | iOS iPadOS macOS device | FALSE |
com.apple.mcxprinting | macOS device macOS user | FALSE |
Privacy Preferences Policy Control com.apple.TCC.configuration-profile-policy Requires a device management service to install. | macOS device | TRUE |
com.apple.relay.managed | iOS iPadOS Shared iPad device macOS device macOS user | TRUE |
com.apple.applicationaccess | iOS iPadOS Shared iPad device macOS device macOS user | TRUE |
com.apple.security.scep | iOS iPadOS Shared iPad device macOS device macOS user tvOS | TRUE |
com.apple.preference.security com.apple.systempolicy.control com.apple.systempolicy.rule | macOS device macOS user | FALSE |
com.apple.SetupAssistant.managed | iOS iPadOS Shared iPad device macOS device macOS user | FALSE |
com.apple.sso | iOS iPadOS | FALSE |
com.apple.security.smartcard | macOS device | FALSE |
com.apple.subscribedcalendar.account | iOS iPadOS Shared iPad user | TRUE |
com.apple.system-extension-policy Requires a device management service to install. | macOS device | TRUE |
com.apple.systemmigration | macOS device | FALSE |
com.apple.MCX.TimeMachine | macOS device | FALSE |
com.apple.vpn.managed | iOS iPadOS macOS device macOS user | TRUE |
com.apple.webClip.managed | iOS iPadOS Shared iPad user macOS user | TRUE |
com.apple.webcontent-filter | iOS iPadOS Shared iPad device macOS device | TRUE |
com.apple.MCX(WiFi) com.apple.builtinwireless.managed com.apple.wifi.managed | iOS iPadOS Shared iPad device macOS device macOS user tvOS watchOS | TRUE |
com.apple.xsan com.apple.xsan.preferences | macOS device | FALSE |