Supervised restrictions for iPhone and iPad devices
Certain restrictions are available only for iPhone and iPad devices that are supervised and enrolled in a mobile device management (MDM) solution.
The following restrictions are available only for supervised iPhone and iPad devices.
Setting | Functionality restriction | Introduced |
|---|---|---|
Allow Shared iPad Temporary Session | Shared iPad won’t allow a Temporary Session. | iPadOS 13.4 |
Add Game Center friends | Users can’t find or add friends in Game Center. | No (iOS 12.4 or earlier) Yes (iOS 13, iPadOS 13.1) |
Multiplayer gaming | Users can’t play multiplayer games in Game Center. | No (iOS 12.4 or earlier) Yes (iOS 13, iPadOS 13.1) |
Safari AutoFill | Safari doesn’t keep track of what users enter in web forms. | No (iOS 12.4 or earlier) Yes (iOS 13, iPadOS 13.1) |
Use Safari | The Safari web browser app is disabled and its icon is removed from the Home Screen. This setting also prevents users from opening Web Clips. | No (iOS 12.4 or earlier) Yes (iOS 13, iPadOS 13.1) |
iTunes Store | The iTunes Store is disabled and its icon is removed from the Home Screen. Users can’t preview, purchase or download content. | No (iOS 12.4 or earlier) Yes (iOS 13, iPadOS 13.1) |
Allow network drive connections | Users can’t connect to network drives in the Files app. | iOS 13.0 iPadOS 13.1 |
Allow USB device connections | Users can’t connect USB devices to the device. | iOS 13.0 iPadOS 13.1 |
Force Wi-Fi on | Users can’t turn off Wi-Fi in:
Users can still select which Wi-Fi network to use. | iOS 13.0 iPadOS 13.1 |
Allow Find My Device | Users can’t use the Find My app. | iOS 13.0 iPadOS 13.1 |
Allow Find My Friends | Users can’t use the Find My Friends feature in the Find My app. | iOS 13.0 iPadOS 13.1 |
Allow QuickPath keyboard | Users can’t use the QuickPath keyboard. | iOS 13.0 iPadOS 13.1 |
Use Safari | The Safari web browser app is disabled and its icon is removed from the Home Screen. This setting also prevents users from opening Web Clips. | iOS 13.0 iPadOS 13.1 |
Safari AutoFill | Safari doesn’t remember what users enter in web forms. | iOS 13.0 iPadOS 13.1 |
iTunes Store | The iTunes Store is disabled and its icon is removed from the Home Screen. Users can’t preview, purchase or download content. | iOS 13.0 iPadOS 13.1 |
Playback of explicit music, podcasts and iTunes U content | Explicit music or video content purchased from the iTunes Store or listed in iTunes U is hidden. Explicit content is flagged by content providers, such as record labels, when sold through the iTunes Store or distributed through iTunes U. | iOS 13.0 iPadOS 13.1 |
Add Game Center friends | Users can’t find or add friends in Game Center. | iOS 13.0 iPadOS 13.1 |
Multiplayer gaming | Users can’t play multiplayer games in Game Center. | iOS 13.0 iPadOS 13.1 |
Install apps using App Store | App Store is disabled and its icon is removed from the Home Screen. Users can’t install or update apps from the App Store using the Finder (in macOS 10.15 or later) and iTunes (in macOS 10.14 or earlier). In iOS 10 or later, MDM can override this restriction. In-house enterprise apps can still be installed and updated. Note: If native iOS and iPadOS system apps are removed, they can be reinstalled. | No (iOS 12.4 or earlier) Yes (iOS 13 and iPadOS 13.1) |
Modify Personal Hotspot settings | Users can’t modify Personal Hotspot settings. | 12.2 |
Modify eSIM settings | Users can’t add or remove an eSIM plan for an iPhone that supports eSIM. | 12.1 |
AirPlay, View Screen by Classroom and screen sharing | Teachers using Classroom can’t use AirPlay with students’ screens, or view or share a student’s screen. | Yes (iOS 12) No (iPadOS 13.1) |
Password AutoFill | Users can’t use AutoFill Passwords, and no prompt is shown to pick a saved password from iCloud Keychain or third-party password managers. | 12.0 |
Proximity AutoFill | Users’ devices won’t advertise themselves to nearby devices for passwords by use of Proximity AutoFill. In iOS, iPadOS and macOS this feature restricts only Wi-Fi Password requests. | 12.0 |
Share passwords over AirDrop | Users can’t share their passwords over AirDrop. | 12.0 |
Turn on “Set Automatically” in Date and Time settings | Set Automatically is turned on and users can’t turn it off. | 12.0 |
Allow connected accessories while locked | Users can always connect accessories when the iOS or iPadOS device is locked. See Activating data connections securely in Apple Platform Security. | 11.4.1 |
Require teacher permission to leave Classroom teacher-created classes | Students must request permission before they can leave a teacher-created class. | 11.3 |
Defer software updates | 11.3 | |
Remove system apps | Users can’t remove iOS or iPadOS-native apps. | 11.0 |
Set up a nearby Apple device | Users can’t use their Apple devices to set up and configure other Apple devices. | 11.0 |
Require Touch ID or Face ID authentication for AutoFill | Users can’t use biometric authentication to AutoFill app data. | 11.0 |
Modify Bluetooth settings | Users can’t modify the Bluetooth setting. | 11.0 |
Modify data plan settings | Users can’t change any settings for the data plan. | 11.0 |
Add VPN configurations | Users can’t create and add VPN configurations. | 11.0 |
AirPrint | Users can’t use AirPrint. | 11.0 |
Discover AirPrint printers using iBeacons | Users can’t discover AirPrint printers using nearby iBeacons. | 11.0 |
Classroom to perform AirPlay and View Screen without prompting | Students in managed classes aren’t prompted when the teacher uses AirPlay or View Screen. | 11.0 |
Classroom can focus students on a single app and lock the device without prompting | Teachers can lock an app open or lock the device without first prompting the user. | 11.0 |
Automatic joining of Classroom classes without prompting | Students can join a class without prompting the teacher. | 11.0 |
Store AirPrint credentials in Keychain | Users can’t save their AirPrint credentials to their Keychain. | 11.0 |
AirPrint to destinations with untrusted certificates | Users can’t use AirPrint to print to printers with untrusted certificates. | 11.0 |
Join only Wi-Fi networks installed by a Wi-Fi payload | When enabled, devices that have this restriction can join only the Wi-Fi networks added to the Wi-Fi payload. Important: If the Wi-Fi network isn’t available, the device can’t be managed. | 10.3 |
Dictation | Users can’t use dictation on their device. | 10.3 |
Modify diagnostic settings | Modifying diagnostic data settings isn’t permitted. | 9.3.2 |
Restrict app usage | Allows any apps other than Settings or Phone (iPhone) to be placed on an approved list or an unapproved list. | 9.3 |
Apple Music | Users can’t use Apple Music. | 9.3 |
Radio | Users can’t listen to the radio with Apple Music. | 9.3 |
Modify Notifications settings | Users can’t change the configuration of any Notifications settings. | 9.3 |
Modify passcode | Users can’t change the set passcode. | 9.0 |
News | Users can’t use the News app. | 9.0 |
Automatic app downloads | The App Store won’t automatically download apps. | 9.0 |
Pair with Apple Watch | Users can’t pair their supervised iPhone with Apple Watch. | 9.0 |
Modify device name | Users can’t change the name of the device as shown in Settings > General > About. | 9.0 |
Modify Wallpaper | Users can’t modify the wallpaper for the Lock Screen or Home Screen. | 9.0 |
Keyboard shortcuts | Users can’t use any keyboard shortcuts. | 9.0 |
Modify Touch ID fingerprints and Face ID faces | Users can’t add or remove existing biometric information. | 8.3 (Touch ID) 11.0 (Face ID) |
Predictive keyboard | Users won’t see the predictive keyboard. | 8.1.3 |
Auto correction | Users won’t see any word correction suggestions. | 8.1.3 |
Spell check | Users won’t see potentially misspelt words underlined in red. | 8.1.3 |
Define | Users can’t double-tap to search for a word’s definition. | 8.1.3 |
Modify restrictions or Screen Time settings | Users can’t set their own restrictions on their device for iOS 11.4.1 or earlier. Users can’t set their own Screen Time settings on their device for iOS 12 or later. | 8.0 (Restrictions) 12.0 (Screen Time) |
Podcasts | Users can’t download podcasts. | 8.0 |
Erase All Content and Settings | Users can’t erase their device and reset it to factory defaults. | 8.0 |
AirDrop | Users can’t use AirDrop. | 7.0 |
Modify Find My settings | Users can’t change any settings in the Find My app. | 7.0 |
Modify account settings | Users can’t create new accounts or change their username, password, or other settings associated with their account. | 7.0 |
Modify mobile data app settings | Users can’t change any settings for apps that use mobile data. | 7.0 |
Autonomous Single App Mode | Allows selected apps to be used in Single App Mode. | 7.0 |
User-generated content in Siri | Siri can’t access content from sources that allow user-generated content, such as Wikipedia. | 7.0 |
Install configuration profiles | Configuration profiles can’t be manually installed by users. | 6.0 |
Game Center | The Game Center app and its icon are removed. | 6.0 |
Apple Books | Apple Books is disabled, and users can’t access it from the Books app. | 6.0 |
iMessage | For Wi-Fi-only devices, the Messages app is hidden. For devices with Wi-Fi and mobile data, the Messages app is still available, but only the SMS/MMS service can be used. | 5.0 |
Siri profanity filter | The profanity filter in Siri can be disabled. | 5.0 |
Remove apps | Users can’t remove installed apps. | 4.2.1 |
Pair with non-Apple Configurator 2 hosts | Users can’t pair their iPhone or iPad device with anything but the Mac with Apple Configurator 2 installed where the device was first supervised. | 4.0 |
Install apps using App Store | App Store is disabled and its icon is removed from the Home Screen. Users can’t install or update apps from the App Store using the Finder (in macOS 10.15 or later) and iTunes (in macOS 10.14 or earlier). In iOS 10 or later, MDM can override this restriction. In-house enterprise apps can still be installed and updated. Note: If native iOS and iPadOS system apps are removed, they can be reinstalled. | 4.0 |