TemplateDescriptionRequirementsNotes
Set passcode policies

Require users to set passcodes according to organizational requirements

  • macOS 13 or later

  • iOS 15 or later

  • iPadOS 15 or later

  • visionOS 2.0 or later

Configure password settings such as:

  • Passcode complexity

  • Passcode length

  • Login attempts

If you have an existing profile with a Passcode payload and scope this template to the same devices, the most restrictive settings will apply.

Install disk management settings

Configure restriction levels for external storage and network storage

macOS 15 or later, supervised

Permit or deny the device to mount external USB or network drives

Math settings

Configure the calculator and related settings

  • macOS 15 or later, supervised

  • iOS 18 or later, supervised

  • iPadOS 18 or later, supervised

Configure calculator settings such as:

  • Scientific mode

  • Unit conversion

  • Math Notes

Manage Safari extensions

Control the extensions end users can use with Safari

  • macOS 15 or later, supervised

  • iOS 18 or later, supervised

  • iPadOS 18 or later, supervised

Manage which Safari extensions are allowed, always on, or always off. Managed extensions can also be allowed or denied access to specific domains.

Service configuration

Configure Apple built-in services on devices

macOS 14 or later, supervised

Control managed settings for system services in a tamper-resistant way.

This configuration requires a ZIP archive file that exactly matches the target service's file structure. This file must be hosted on your trusted HTTPS delivery URL and the configuration must also include a SHA-256 hash of the file.

Managed Services are:

  • sshd

  • sudo

  • PAM

  • CUPS

  • Apache httpd

  • bash

  • zsh

Service background tasks

Configure background task management on devices

macOS 15 or later, supervised

Control managed settings for background tasks and launch items in a tamper-resistant way.

Requires a ZIP archive file that exactly matches the target service's file structure. This file must be hosted on your trusted HTTPS delivery URL and the configuration must also include a SHA-256 hash of the file.