iOS and iPadOS: Apps rules

Name

Description

Activation types

Default

Possible values

Allow use of iTunes Store (supervised only)

Specify whether the iTunes Store is available on an iOS device. If this rule is not selected, the iTunes Store icon is removed from the home screen and users can't preview, purchase, or download content.

This rule is deprecated for unsupervised devices.

MDM controls

Selected

Force limited ad tracking

Specify whether apps on an iOS device can use the Advertising Identifier (a non-permanent device identifier) to provide targeted ads to users.

MDM controls

Not selected

Allow use of Safari (supervised only)

Specify whether Safari is available on an iOS device.

If this rule is not selected, the Safari icon is removed from the home screen and users can't use Safari or open any Web Clips, including BlackBerry Work Apps, on the device.

This rule is deprecated for unsupervised devices.

MDM controls

Selected

Enable autofill (supervised only)

Specify whether Safari remembers information that users enter in web forms.

This rule is deprecated for unsupervised devices.

Depends on: Allow use of Safari (supervised only)

MDM controls

Selected

Force fraud warning

Specify whether Safari warns users when they visit websites identified as fraudulent or compromised.

Depends on: Allow use of Safari (supervised only)

  • MDM controls
  • User privacy - User enrollment

Not selected

Enable JavaScript

Specify whether Safari allows websites to run JavaScript.

Depends on: Allow use of Safari (supervised only)

MDM controls

Selected

Block pop-ups

Specify whether pop-up blocking is enabled in Safari.

Depends on: Allow use of Safari (supervised only)

MDM controls

Not selected

Allow cookies and cross-site tracking

Specify whether Safari can accept cookies and whether users can enable cross-site tracking. You can both prevent cross-site tracking and block all cookies, only prevent cross-site tracking, or only prevent cross-site tracking but allow users to change the Prevent Cross-Site Tracking setting.

Depends on: Allow use of Safari (supervised only)

MDM controls

Enable Prevent Cross-Site Tracking

  • Enable Prevent Cross-Site Tracking and Block All Cookies
  • Enable Prevent Cross-Site Tracking
  • Enable Prevent Cross-Site Tracking and allow users to disable it

Allow Safari private browsing (supervised only)

If "false", the system disables the ability to use private browsing in Safari.

Minimum OS version: 26.0

MDM controls

Selected

Allow Safari history clearing (supervised only)

If "false", the system disables the ability to clear browsing history in Safari.

Minimum OS version: 26.0

MDM controls

Selected

Allow finding devices in the Find My app (supervised only)

Specify whether users can use the Find My app to locate their devices.

MDM controls

Selected

Allow finding friends in the Find My app (supervised only)

Specify whether users can use the Find My app to locate their friends.

MDM controls

Selected

Allow modifying Find My Friends settings (supervised only)

Specify whether users can change settings in the Find My Friends app if it is installed on the device.

If this rule is not selected and location services is turned on, users can't turn location services off on the device.

MDM controls

Selected

Allow use of Game Center (supervised only)

Specify whether Game Center is available on an iOS device.

If this rule is not selected, the Game Center icon is removed from the home screen and users can't use Game Center.

MDM controls

Selected

Allow multiplayer gaming (supervised only)

Specify whether users can play multiplayer games that support Game Center.

If this rule is selected and the "Allow adding Game Center friends" rule is not selected, users can play multiplayer games only with existing friends. If this rule is not selected, users can't play multiplayer games or add friends in Game Center. This rule is deprecated for unsupervised devices.

Depends on: Allow use of Game Center (supervised only)

MDM controls

Selected

Allow adding Game Center friends (supervised only)

Specify whether users can send and receive friend requests in Game Center. The "Allow multiplayer gaming" rule must also be selected to allow users to add friends in Game Center.

This rule is deprecated for unsupervised devices.

Depends on: Allow use of Game Center (supervised only)

MDM controls

Selected

Allow AirDrop (supervised only)

Specify whether AirDrop is enabled on an iOS device.

If this rule is not selected, users can't use AirDrop with any apps and the AirDrop option is removed from Control Center.

MDM controls

Selected

Allow Internet results in Spotlight (supervised only)

Specify whether a Spotlight search returns Internet search results when searching for content on a device.

MDM controls

Selected

Force AirDrop to be unmanaged

Specify whether AirDrop is unmanaged as a drop target.

  • MDM controls
  • User privacy - User enrollment

Not selected

Allow App Store (supervised only)

Specify whether the App Store is available on an iOS device. Users can still use host apps (iTunes, Configurator) to install or update apps.

Note: If you turn off this rule, non-VPP apps cannot be updated on devices because the devices will not be able access the App Store. VPP apps can still be updated through the MDM channel. If a user tries to update a non-VPP app from their device, the device browser will display an invalid address error because it cannot access the App Store.

MDM controls

Selected

Allow marketplace apps (supervised only)

Specify whether users are allowed to install alternative marketplace apps.

Minimum OS version: 17.4

MDM controls

Selected

Allow web distribution apps (supervised only)

Specify whether users are allowed to install web distribution apps.

Minimum OS version: 17.5

MDM controls

Selected

Allow automatic app downloads (supervised only)

Specify whether the device automatically downloads apps purchased on other devices. This does not affect updates to existing apps.

MDM controls

Selected

Allow enterprise app trust modifications (supervised only)

Specify whether the user can change the enterprise app trust settings on the device.

MDM controls

Selected

Allow enterprise apps to be trusted

Specify whether the device can trust enterprise apps.

MDM controls

Selected

Allow Files app to use USB (supervised only)

Specify whether the Files app can access files using a USB connection.

MDM controls

Selected

Allow Files app to connect to network drives (supervised only)

Specify whether the Files app can access files stored on a network drive.

MDM controls

Selected

Allow App Clips (supervised only)

Allow users to add some App Clips and remove existing App Clips on the device.

Minimum OS version: 14.0.0

MDM controls

Selected

Allow hiding apps (supervised only)

Allow users to hide apps. It does not affect the user's ability to leave it in the App Library, while removing it from the home screen.

Minimum OS version: 18.0

MDM controls

Selected

Allow locking apps (supervised only)

Allow users to lock apps. Because hiding apps also requires locking them, disallowing locking also disallows hiding.

Minimum OS version: 18.0

MDM controls

Selected

Allow default browser modification (supervised only)

If false, disables default browser preference modification. The MDM Settings command to set the default browser preference will still work when this is applied.

Minimum OS version: 18.2

MDM controls

Selected