Settings Restrictions for iOS Groups
The restrictions can be set in the following location:
MDM > Groups > iOS > Restrictions tab
The following configuration options are available:
• Device Functionality
> Allow camera – select this option to allow the camera. If this option is not selected, the camera icon is hidden and removed from the Home screen. Users can’t take photographs or videos, or use FaceTime.
> Allow screenshots – select this option box to allow the user to take screenshots. If this option is not selected, save a screenshot or screen recording of the display.
> Always require iTunes Store password – select this option if you want the user to always enter the password to iTunes.
> Allow Siri – select this option to allow Siri. If this option is not selected, users will not be able to launch Siri.
> Allow Siri when locked – select this option box to allow Siri when the device is locked.
• Content Rating
> Allow Bookstore erotica – select this option to allow the device to access erotica through the Bookstore.
> Allowed App rating – select the allowed app rating from the drop-down.
> Allowed Movie rating – select the maximum permitted movie rating from the drop-down.
> Allowed TV rating – select the maximum permitted TV rating from the drop-down.
• iCloud
> Allow Photo Stream – select this option to allow Photo Stream. If this option is not selected, Upload to My Photo Stream is hidden in Settings > [your name] > iCloud > Photos.
> Allow Shared Photo Stream – select this option to allow shared Photo Stream. If this option is not selected, iCloud Photo Sharing is hidden in Settings > [your name] > iCloud > Photos.
> Allow iCloud backup – select this option to allow users to perform iCloud backup. If this option is not selected the iCloud Backup option in Settings > [your name] > iCloud > iCloud Backup is disabled and the backup can only be performed using iTunes.
• Supervised Devices Only – the following restrictions can be set only for supervised devices:
> Allow AirDrop – select this option to allow AirDrop. If this option is not selected, the users will not be able to share files with other iOS devices using the AirDrop feature.
> Allow account modification – select this option to allow users to log on to the iTunes Store. If this checkbox is not selected, the users will not able to log on to the iTunes Store and change the password.
> Allow apps to modify cellular data usage – select this option to allow users to select which apps can use cellular data. If this option is not selected, users can’t change any settings regarding what apps use cellular data.
> Allow app removal – select this option to allow users to uninstall apps from the device.
> Allow Siri to access user generated content – select this option to allow Siri to obtain user generated content. If this option is not selected, Siri can’t obtain content from sources that allow user-generated content, such as Wikipedia.
> Allow Bookstore – select this option to allow iBooks. If this option is not selected, iBooks app will be empty and users will not be able to access books.
> Allow iMessage – select this option to allow iMessage. If this option is not selected, only text messages will be allowed and iMessage will be disabled.
> Allow FaceTime – select this option to allow FaceTime video and audio calls. To allow FaceTime, Camera has to be allowed on the device.
> Allow Bluetooth modifications – select this option to allow modifying the Bluetooth settings.
> Allow device name modifications – select this option to allow users to modify device name. If this option is not selected, users cannot modify the device name from Settings > General > About > Name.
> Allow Find My Friends modifications – select this option to allow modifications in the My Friends app such as Current Location, Share My Location, Send As, Allow Friend Requests and Show Geofence Alerts from.
> Allow Game Center – select this option to allow the Game Center application. If this option is not selected, Game Center is disabled and the icon is not visible.
> Allow host paring – select this option to allow iOS devices with hosts such as a MacBook or iMac. If this option is not selected, users will only be able to pair the device with MacBook or iMac from where the device was first supervised using the Apple Configurator.
> Allow interactive installation of profiles and certifications – select this option to enable the Install option while installing End User Digital Certificates and profiles. If this checkbox is not selected, the Install option will be disabled and the user cannot install End User Digital Certificates.
> Allow News – select this option to allow the iOS News widget. The news widget will not be shown if this option is not selected.
> Allow Wallpaper Modification – select this option to allow users to modify their wallpaper. The Wallpaper option will be disabled in Settings if this option is not selected.
> Allow USB Restricted Mode (iOS 11.4.1) – select this option to lock down the device charging port into power-only mode when connected to the computer one hour after it was last unlocked.
> Allow AutoFill Password (iOS 12+) – select this option to enable password AutoFill or choosing from saved passwords.
> Force automatic Date & Time (iOS 12+) – select this option to set the device to adjust automatically for date and time changes such as daylight savings time or time zone changes.
> Allow explicit content – select this option to allow explicit content.
> Allow iCloud document sync – select this option to allow syncing documents to iCloud from Pages or iWork. If this option is not selected, Pages or iWork will not be able to sync with iCloud.
> Allow App installation – select this option to allow users to install apps from the Apple App Store. If this option is not selected, users will be prevented from installing apps on their own.
> Allow Safari – select this option to allow the Safari browser. If this option is not selected, Safari browser will be disabled.
> Delay OS Software Updates until x days after release date (iOS 12+) – select this option to delay OS software updates until up to 90 days.