General payload settings for Apple devices
General settings are mandatory for all Apple devices enrolled in a mobile device management (MDM) solution. Use the General payload to define the name and identifier of each configuration profile, and to specify when users can remove the profile after it is installed. There can be multiple General payloads, each with different information.
OS and channel | Supported enrolment types | Interaction | Duplicates |
|---|---|---|---|
iOS iPadOS tvOS macOS device macOS user | User Device Automated Device | Combined | Single |
Setting | Description | Required |
|---|---|---|
Profile Distribution Type | Choose whether this profile is for managed devices or distributed to users for them to install manually. For managed devices, when you save the configuration profile, it’s immediately queued for all assigned devices, users and groups. If you choose manual installation, you can set the Security options that determine whether the profile can be removed by users. | Yes |
Name | This name appears in the profiles list and is displayed on the device after the configuration profile is installed. The name doesn’t have to be unique, but you should use a descriptive name that identifies the profile. | Yes |
Identifier | This is a unique identifier for the configuration profile. You can replace a configuration profile on an iOS or iPadOS device, if it has the same identifier. | Yes |
Organisation | The name of your organisation, which helps users identify the source of this profile. | No |
Description | The purpose of the profile. A description is useful if you manage profiles using a mobile device management solution that queries devices for the installed profiles. This description is shown in Settings on the iOS or iPadOS device, or in the Profiles preference pane in macOS. | No |
Consent message | Before installing a profile, users are presented with and prompted to accept the text contained in the text box. This consent text is shown only for profiles set to download manually and not for automatically pushed profiles. | No |
Security | Choose an option from the pop-up menu to prevent a user from deleting a profile installed on a device. Use the With Authorisation option to specify an authorisation password that lets the profile be removed from the device. If you choose Never, the profile can be updated with a new version but it can’t be removed from the device by users. | Yes |
Automatically Remove Profile | Choose when to remove this profile from the device. You can choose to manually remove this profile, to remove this profile on a specific date, or to remove the profile after a specific length of time from when it’s installed. | Yes |