iOS Settings

Policy

Description

Exchange ActiveSync Settings

Configure Exchange ActiveSync profile for iOS devices.

Per app VPN Settings

Map native applications to a specific VPN connection.

This feature is only available for VPN profiles that use the F5 VPN with certificate based authentication.

Kiosk Mode

Policy

Description

Allow user to control assistive touch setting

Displays a control to let user adjust assistive touch.

This policy only goes into effect if the “Enable assistive touch” policy is set.

Allow user to control invert-color setting

Displays a control to let user modify invert color settings.

This policy only goes into effect if the “Enable invert colors” policy is set.

Allow user to control voice-over setting

Displays a control to let user adjust voice-over settings.

Note: This policy only goes into effect if the “Enable voice-over” policy is set.

Allow user to control zoom Setting

Displays a control to let user adjust the zoom.

This policy only goes into effect if the “Enable zoom” policy is set.

Enable kiosk mode (Supervised Only)

Puts the device in kiosk (single application only) mode and lets you select the MDM client or a specific application to run as the application.

All of the other kiosk mode policies go into effect only when the policy is enabled.

Use MDM client as kiosk mode application

Allows users to use the CyberArk Identity application in kiosk mode.

Application statuses, such as Install and Update, are not displayed when a device is in kiosk mode.

Use built-in application as kiosk mode application

Allows users to use the selected built-in application (such as Contacts, Calendar, etc.) in kiosk mode. You must provide the application bundle identifier when defining this policy.

Use custom application as kiosk mode application

Allows users to use the defined custom application in kiosk mode.

Device control policies

 

Disable auto-lock

Disable device rotation

Disable ringer switch

Disable sleep-wake button

Disable touch

Disable volume buttons

Enable Assistive touch

Enable invert colors

Enable mono-audio

Enable speak selection

Enable Voiceover

Enable zoom

Restrictions Settings

Policy

Description

Force encrypted backups

Allow devices to back up to iTunes without encryption.

Force iTunes Store password

Require device owners to enter a password for all iTunes transactions.

Force limit Ad tracking

Limit device Ad tracking.

Force Siri Profanity Filter (Supervised Only)

Allow device to use Siri Profanity Filter.

GPME: Permit access to Airdrop (Supervised only)

CyberArk Cloud Directory policy service: Permit Airdrop (Supervised only)

Allow users to use AirDrop.

Permit access to erotic media of iBookstore (Supervised Only)

Allow device to access erotic media in iBookstore .

This setting applies only to devices that are configured as ‘supervised’ with Apple Configurator.

Permit access to Game Center (Supervised Only)

Allow device owners to access Game Center

This setting applies only to devices that are configured as ‘supervised’ with Apple Configurator.

Permit access to iBookstore (Supervised Only)

Allow device owners to access iBookstore.

This setting applies only to devices that are configured as ‘supervised’ with Apple Configurator.

Permit access to Shared Photo Stream

Allow device owners to access Shared Photo Stream.

Permit account modification (Supervised Only)

Allow device owners to modify the account.

Permit adding Game Center friends (Supervised Only)

Allow device owners to add Game Center friends on their devices.

Permit app cellular data usage changes (Supervised Only)

Allow applications to change from wi-fi to cellular data on device.

Permit automatic diagnostic reports submission

Allow devices to submit diagnostic reports to Apple automatically.

Permit automatic sync while roaming

Allow devices to automatically sync while roaming.

Permit device to show Passbook notifications on lock screen

Allow devices to display Passbook notifications when the device is locked.

Permit explicit music & podcasts

Allow device owners to access explicit music and podcasts on their devices.

Permit Find My Friends settings modification (Supervised only)

Allow device owners to enable Find My Friends on their devices.

Permit iCloud backup

Allow device owners to back up their devices to iCloud.

Permit iCloud document sync

Allow device owners to synchronize documents and key values to iCloud.

Permit iCloud keychain sync

Allow device owners to synchronize keychain to iCloud.

Permit iMessage (Supervised Only)

Allow device owners to access iMessage.

Permit in-app purchase

Allow device owners to make in-app purchases.

Permit installing apps

Allow device owners to install apps on their devices.

Permit iTunes Music Store use

Allow device owners to use the iTunes Music Store on their devices.

Permit screen control center

Allow device to show control center during lock screen.

Permit lock screen notification view

Allow the device to show Notifications View during lock screen.

Permit lock screen today view

Allow device to show Today View during lock screen.

Permit manual configuration file installation (Supervised Only)

Allow the device to install configuration profiles and certificates interactively.

This setting applies only to devices that are configured as ‘supervised’ with Apple Configurator.

Permit multiplayer gaming (Supervised Only)

Allow device owners to play multi-player games on their devices.

Permit opening managed app documents in unmanaged apps

Allow device owners to open managed application documents in an unmanaged application.

Permit opening unmanaged apps documents in managed apps

Allow device owners to open unmanaged application documents in managed applications.

GPME: Permit pairing with non-Configurator hosts (Supervised Only)

CyberArk Cloud Directory policy service: Permit host pairing (Supervised Only)

Allow supervised devices to connect to any Mac.

Permit Photo Stream

Allow device owners to use Photo Stream on their devices.

Permit removing apps (Supervised Only)

Allow device owners to remove apps on their devices.

Permit Safari use

Allow device owners to use the Safari web browser and set specific options for Safari.

Permit screen capture

Allow device owners to capture screens on their devices.

Permit Siri use

Allow device owners to use Siri on their devices.

Permit Siri use while device is locked

Allow device owners to use Siri on their devices while device is locked.

Permit Touch IDto unlock device

Allow biometrics scan to unlock a device.

Permit untrusted TLS prompt

Prompt device owners when their device receives an untrusted HTTPS certificate.

Permit user-generated content in Siri

Allow device to have user-generated content in Siri.

Permit voice dialing

Allow device owners to voice dial on their devices.

Ratings

Enforce a rating policy, limiting movie, TV show, and app viewing to the specified rating level.