MDM

Complete MDM payload list for Apple devices

Payloads can be used on various operating systems, and with users and devices (in some cases, they work only on devices that are supervised). Payload settings for Apple devices are detailed in the table below, which contains the following columns. Before you review the table below, understand what each column contains.

Payload name: The name of the payload in Apple Configurator 2 or Profile Manager. If you’re using a third-party mobile device management (MDM) solution, the payload name may be different.
System and channel: This column notes the Apple device operating system and specifies whether the macOS payload can be used for a device configuration profile or a user configuration profile.
Supported enrolment type: This column notes the three enrolment types: User Enrolment, Device Enrolment and Automated Device Enrolment. See Enrolment types.
Interaction: This column notes how settings of different payloads interact when applied to a device. Multiple payloads of the same kind can be applied to a device. If payloads contain account, certificate or network configurations, each of the payloads’ settings are applied simultaneously. Some network payloads may conflict with others. For example, if two payloads define different network settings for the same SSID, the result is undefined. iOS or iPadOS payloads containing restrictions don’t conflict, because each payload uses the most restrictive value possible. In combined payloads for macOS, most restriction settings (vs. account settings) are undefined if more than one value exists across payloads.
You can use combined payloads to add usage restrictions together to form a restrictive environment where the user has very limited options on what can be used on the device.
- Combined payloads: Combined payload items aren’t mutually exclusive. These payload items are linked together, keeping all the payload items. Combined payloads are usually things like mail or LDAP accounts, where the existence of one doesn’t preclude your having additional accounts.
- Exclusive payloads: Exclusive payloads can have only one possible version of a setting (just like device names, password policies or specific network settings), and this setting can be applied only once. For example, a device can’t simultaneously have more than one Global HTTP proxy payload. Any duplicate payload settings overwrite previous settings.
Note: In iOS, iPadOS and tvOS, if combined payloads have the same account description (or display name), they’re treated as exclusive payloads.
Duplicates: This column notes whether one specified payload (Single) or more than one specified payload (Multiple) can be delivered to a user or device. For example, you can add more than one Subscribed Calendars payload to a configuration profile. This allows you to subscribe the user to, in this case, more than one calendar.

Note: Not all payloads and their respective settings are available in all MDM solutions. Consult your MDM vendor’s documentation to see which payload and settings they support.

Payload	OS	Supported enrolment type	Interaction	Duplicates
General	iOS iPadOS Shared iPad tvOS macOS device macOS user	User Device Automated Device	Exclusive	Single
Accessibility	macOS device macOS user	Device Automated Device	Exclusive	Single
Active Directory Certificate	macOS device macOS user	User Device Automated Device	Exclusive	Multiple
AirPlay	iOS iPadOS Shared iPad device macOS device macOS user	User Device Automated Device	Combined	Single
AirPlay Security	tvOS	Device Automated Device	Exclusive	Single
AirPrint	iOS iPadOS Shared iPad device macOS device macOS user	User Device Automated Device	Combined	Single
App Configuration	iOS iPadOS tvOS	Device Automated Device	Exclusive	Multiple
Associated Domains	macOS device macOS user	User Device Automated Device	Exclusive	Multiple
Autonomous Single App Mode	macOS device	Device Automated Device	Exclusive	Single
Calendar	iOS iPadOS Shared iPad user macOS user	User Device Automated Device	Combined	Multiple
Cellular	iOS iPadOS Shared iPad device watchOS	Device Automated Device	Exclusive	Single
Certificates	iOS iPadOS Shared iPad device tvOS macOS device macOS user watchOS	User Device Automated Device	Combined	Multiple
Certificate Preference	macOS user	User Device Automated Device	Combined	Multiple
Certificate Transparency	iOS iPadOS Shared iPad device tvOS macOS device watchOS	User Device Automated Device	Combined	Multiple
Conference Room Display	tvOS	Automated Device	Exclusive	Single
Contacts	iOS iPadOS Shared iPad user macOS user	User Device Automated Device	Combined	Multiple
Content Caching	macOS device	Device Automated Device	Exclusive	Single
Directory	macOS device	User Device Automated Device	Exclusive	Multiple
DNS Proxy	iOS iPadOS Shared iPad device	Automated Device	Exclusive	Multiple
DNS Settings	iOS iPadOS Shared iPad device macOS device	Device Automated Device	Combined	Multiple
Dock	macOS device macOS user	Device Automated Device	Combined	Single
Domains	iOS iPadOS Shared iPad device Shared iPad user macOS device macOS user	Device Automated Device	Combined	Single
Energy Saver	macOS device	Device Automated Device	Combined	Single
Exchange ActiveSync (EAS)	iOS iPadOS Shared iPad user	User Device Automated Device	Combined	Multiple
Exchange Web Services (EWS)	macOS user	User Device Automated Device	Combined	Multiple
Extensible Single Sign-On Can be installed only by an MDM solution	iOS iPadOS Shared iPad user macOS device macOS user	User Device Automated Device	Exclusive	Single
Extensible Single Sign-On Kerberos Can be installed only by an MDM solution	iOS iPadOS Shared iPad user macOS device macOS user	User Device Automated Device	Exclusive	Multiple
Extensions	macOS device macOS user	Device Automated Device	Exclusive	Multiple
File Provider	macOS device macOS user	Device Automated Device	Exclusive	Single
Finder	macOS device macOS user	Device Automated Device	Combined	Single
Fonts	iOS iPadOS Shared iPad device macOS device macOS user	User Device Automated Device	Combined	Single
Global HTTP Proxy	iOS iPadOS Shared iPad device tvOS macOS device	Automated Device	Exclusive	Single
Google Accounts	iOS iPadOS Shared iPad user	User Device	Combined	Multiple
Home Screen Layout	iOS iPadOS Shared iPad device Shared iPad user tvOS	Automated Device	Exclusive	Single
Identification	macOS device macOS user	User Device Automated Device	Exclusive	Single
Kernel Extension Policy	macOS device	Device Automated Device	Exclusive	Multiple
LDAP	iOS iPadOS Shared iPad user macOS user	User Device Automated Device	Combined	Multiple
Lights Out Management	macOS device	Device Automated Device	Exclusive	Single
Lock Screen Message	iOS iPadOS Shared iPad device	Automated Device	Exclusive	Single
Login Items	macOS device macOS user	User (Managed items only) Device Automated Device	Combined	Multiple (Managed items) Single (Login items)
Login Window	macOS device macOS user	Device Automated Device	Combined	Multiple (Login Window) Single (Scripts)
Mail	iOS iPadOS Shared iPad user macOS user	User Device Automated Device	Combined	Multiple
Network	iOS iPadOS Shared iPad device tvOS macOS device macOS user watchOS	User Device Automated Device	Combined	Multiple
Network Usage Rules Can be installed only by an MDM solution	iOS iPadOS Shared iPad device	Automated Device	Exclusive	Single
Notifications	iOS iPadOS Shared iPad device Shared iPad user macOS device macOS user	User (macOS only) Device (macOS only) Automated Device	Exclusive	Single
Parental Controls	macOS device macOS user	Device Automated Device	Combined	Single
Passcode	iOS iPadOS macOS device macOS user	User Device Automated Device	Combined	Single
Printing	macOS device macOS user	Device Automated Device	Combined	Single
Privacy Preferences Policy Control	macOS device	Device Automated Device	Exclusive	Multiple
Proxy	macOS device	Device Automated Device	Exclusive	Single
Restrictions	iOS iPadOS Shared iPad device macOS device macOS user	User Device Automated Device	Exclusive	Single
SCEP	iOS iPadOS Shared iPad device tvOS macOS device macOS user	User Device Automated Device	Combined	Multiple
Security & Privacy	macOS device macOS user	Device Automated Device	Some	Single
Set-up Assistant	iOS iPadOS Shared iPad device macOS device macOS user	User Device Automated Device	Exclusive	Single
Single App Mode	iOS iPadOS Shared iPad device tvOS	Automated Device	Exclusive	Single
Single Sign-On Can be installed only by an MDM solution	iOS iPadOS	User Device Automated Device	Exclusive	Single
Smart Card	macOS device	Device Automated Device	Exclusive	Single
Software Update	macOS device	Device Automated Device	Combined	Single
Subscribed Calendars	iOS iPadOS Shared iPad user	User Device Automated Device	Combined	Multiple
System Migration	macOS device	Device Automated Device	Combined	Single
Time Machine	macOS device	Device Automated Device	Combined	Single
TV Remote	iOS iPadOS Shared iPad device tvOS	Automated Device	Exclusive	Single
VPN	iOS iPadOS macOS device macOS user	User (App-Layer VPN and App-to-App Layer VPN mapping only) Device Automated Device	Combined	Multiple
Web Clips	iOS iPadOS Shared iPad user macOS user	User Device Automated Device	Combined	Multiple
Web Content Filter	iOS iPadOS Shared iPad device macOS device	Device Automated Device	Combined	Single
Xsan	macOS device	Device	Exclusive	Single

Helpful?

Mobile Device Management Settings

Complete MDM payload list for Apple devices