A payload can be configured to manage specific settings on Apple devices. For example, you can have different payloads to require a complex passcode, populate a mail account with all the mail server information, and add a VPN configuration to a device. Even though each payload has its own unique settings, all payloads are defined by the following:
The operating system or systems that the payload supports
The channel that does the payload work
Whether the payload requires the Apple device to be supervised
Whether the payload is exclusive or whether it can be combined with other payloads of the same type
Whether the payload can have duplicates
See the Complete payload list. To learn which MDM payloads are supported for your devices, consult your MDM solution’s documentation.
Interaction with Open Directory
macOS payloads may behave differently when they interact with Open Directory settings as follows:
Managed device-applied user profiles take priority over Open Directory–stored user settings.
Open Directory-stored user settings take priority over managed device–applied device profiles.
Managed device-applied device profiles take priority over Open Directory–stored computer settings.
Manually installed user and device profiles always have the lowest priority over Open Directory–stored or managed device-applied user or device settings.