An XML file that contains at least two payloads—for example, General settings (one setting with one payload) and Passcode settings (one setting with one payload). You install configuration profiles on a Mac or iOS device to configure specific settings. Except for passwords, users generally can’t change settings that are defined in a configuration profile. You can mark a profile as being locked to the device, so when the profile is installed, it can be removed only by wiping the device of all data (or by entering a password or passcode).
Configuration profiles can be assigned to devices, device groups, users, and user groups. Configuration profiles are created using Apple Configurator 2, a third-party MDM solution, or Profile Manager, which is part of macOS Server.