iOS Settings
|
Policy |
Description |
|
Exchange ActiveSync Settings |
Configure Exchange ActiveSync profile for iOS devices. |
|
Per app VPN Settings |
Map native applications to a specific VPN connection. This feature is only available for VPN profiles that use the F5 VPN with certificate based authentication. |
Kiosk Mode
|
Policy |
Description |
|
Allow user to control assistive touch setting |
Displays a control to let user adjust assistive touch. This policy only goes into effect if the “Enable assistive touch” policy is set.
|
|
Allow user to control invert-color setting |
Displays a control to let user modify invert color settings. This policy only goes into effect if the “Enable invert colors” policy is set.
|
|
Allow user to control voice-over setting |
Displays a control to let user adjust voice-over settings. Note: This policy only goes into effect if the “Enable voice-over” policy is set. |
|
Allow user to control zoom Setting |
Displays a control to let user adjust the zoom. This policy only goes into effect if the “Enable zoom” policy is set.
|
|
Enable kiosk mode (Supervised Only) |
Puts the device in kiosk (single application only) mode and lets you select the MDM client or a specific application to run as the application. All of the other kiosk mode policies go into effect only when the policy is enabled.
|
|
Use MDM client as kiosk mode application |
Allows users to use the CyberArk Identity application in kiosk mode. Application statuses, such as Install and Update, are not displayed when a device is in kiosk mode.
|
|
Use built-in application as kiosk mode application |
Allows users to use the selected built-in application (such as Contacts, Calendar, etc.) in kiosk mode. You must provide the application bundle identifier when defining this policy. |
|
Use custom application as kiosk mode application |
Allows users to use the defined custom application in kiosk mode. |
|
Device control policies
|
Disable auto-lock Disable device rotation Disable ringer switch Disable sleep-wake button Disable touch Disable volume buttons Enable Assistive touch Enable invert colors Enable mono-audio Enable speak selection Enable Voiceover Enable zoom |
Restrictions Settings
|
Policy |
Description |
|
Force encrypted backups |
Allow devices to back up to iTunes without encryption. |
|
Force iTunes Store password |
Require device owners to enter a password for all iTunes transactions. |
|
Force limit Ad tracking |
Limit device Ad tracking. |
|
Force Siri Profanity Filter (Supervised Only) |
Allow device to use Siri Profanity Filter. |
|
GPME: Permit access to Airdrop (Supervised only) CyberArk Cloud Directory policy service: Permit Airdrop (Supervised only) |
Allow users to use AirDrop. |
|
Permit access to erotic media of iBookstore (Supervised Only) |
Allow device to access erotic media in iBookstore . This setting applies only to devices that are configured as ‘supervised’ with Apple Configurator. |
|
Permit access to Game Center (Supervised Only) |
Allow device owners to access Game Center This setting applies only to devices that are configured as ‘supervised’ with Apple Configurator. |
|
Permit access to iBookstore (Supervised Only) |
Allow device owners to access iBookstore. This setting applies only to devices that are configured as ‘supervised’ with Apple Configurator. |
|
Permit access to Shared Photo Stream |
Allow device owners to access Shared Photo Stream. |
|
Permit account modification (Supervised Only) |
Allow device owners to modify the account. |
|
Permit adding Game Center friends (Supervised Only) |
Allow device owners to add Game Center friends on their devices. |
|
Permit app cellular data usage changes (Supervised Only) |
Allow applications to change from wi-fi to cellular data on device. |
|
Permit automatic diagnostic reports submission |
Allow devices to submit diagnostic reports to Apple automatically. |
|
Permit automatic sync while roaming |
Allow devices to automatically sync while roaming. |
|
Permit device to show Passbook notifications on lock screen |
Allow devices to display Passbook notifications when the device is locked. |
|
Permit explicit music & podcasts |
Allow device owners to access explicit music and podcasts on their devices. |
|
Permit Find My Friends settings modification (Supervised only) |
Allow device owners to enable Find My Friends on their devices. |
|
Permit iCloud backup |
Allow device owners to back up their devices to iCloud. |
|
Permit iCloud document sync |
Allow device owners to synchronize documents and key values to iCloud. |
|
Permit iCloud keychain sync |
Allow device owners to synchronize keychain to iCloud. |
|
Permit iMessage (Supervised Only) |
Allow device owners to access iMessage. |
|
Permit in-app purchase |
Allow device owners to make in-app purchases. |
|
Permit installing apps |
Allow device owners to install apps on their devices. |
|
Permit iTunes Music Store use |
Allow device owners to use the iTunes Music Store on their devices. |
|
Permit screen control center |
Allow device to show control center during lock screen. |
|
Permit lock screen notification view |
Allow the device to show Notifications View during lock screen. |
|
Permit lock screen today view |
Allow device to show Today View during lock screen. |
|
Permit manual configuration file installation (Supervised Only) |
Allow the device to install configuration profiles and certificates interactively. This setting applies only to devices that are configured as ‘supervised’ with Apple Configurator. |
|
Permit multiplayer gaming (Supervised Only) |
Allow device owners to play multi-player games on their devices. |
|
Permit opening managed app documents in unmanaged apps |
Allow device owners to open managed application documents in an unmanaged application. |
|
Permit opening unmanaged apps documents in managed apps |
Allow device owners to open unmanaged application documents in managed applications. |
|
GPME: Permit pairing with non-Configurator hosts (Supervised Only) CyberArk Cloud Directory policy service: Permit host pairing (Supervised Only) |
Allow supervised devices to connect to any Mac. |
|
Permit Photo Stream |
Allow device owners to use Photo Stream on their devices. |
|
Permit removing apps (Supervised Only) |
Allow device owners to remove apps on their devices. |
|
Permit Safari use |
Allow device owners to use the Safari web browser and set specific options for Safari. |
|
Permit screen capture |
Allow device owners to capture screens on their devices. |
|
Permit Siri use |
Allow device owners to use Siri on their devices. |
|
Permit Siri use while device is locked |
Allow device owners to use Siri on their devices while device is locked. |
|
Permit Touch IDto unlock device |
Allow biometrics scan to unlock a device. |
|
Permit untrusted TLS prompt |
Prompt device owners when their device receives an untrusted HTTPS certificate. |
|
Permit user-generated content in Siri |
Allow device to have user-generated content in Siri. |
|
Permit voice dialing |
Allow device owners to voice dial on their devices. |
|
Ratings |
Enforce a rating policy, limiting movie, TV show, and app viewing to the specified rating level. |
