Parental Controls: Application Restrictions
com.apple.applicationaccess.new
The payload that configures parental controls for apps.
Not available with User Enrollment
1 of 7 settings are available in the Intune Settings Catalog. The remaining settings require a custom .mobileconfig profile.
DDM recommended — 1 of 7 settings support Declarative Device Management. In Intune use Settings Catalog → Declarative Device Management.
Configuration Keys (7)
| Key | Type | Description | Default | Range | DDM |
|---|---|---|---|---|---|
| boolean | If 'true', enables app access restrictions. | Default: — | Range: — | ||
| array | The allow list of app item dictionaries. This property is deprecated in macOS 10.15 and later - use 'allowList' instead. | Default: — | Range: — | ||
allowListItemdictAllowlisted Item | dict | A dictionary defining an app for parental control. | Default: — | Range: — | |
| string | The bundle ID of the app. | Default: — | Range: — | ||
displayNamestringDisplay Name | string | The name used for display purposes. | Default: — | Range: — | |
| data | The identifier of the app. Obtain this value from the Security framework using 'SecCodeCopyDesignatedRequirement'. | Default: — | Range: — | ||
subAppsarraySub Apps | array | An array of nested helper applications. | Default: — | Range: — | |
allowListItemdict | dict | A dictionary defining an app for parental control. | Default: — | Range: — | |
| string | The bundle ID of the app. | Default: — | Range: — | ||
displayNamestringDisplay Name | string | The name used for display purposes. | Default: — | Range: — | |
| data | The identifier of the app. Obtain this value from the Security framework using 'SecCodeCopyDesignatedRequirement'. | Default: — | Range: — | ||
Detached Signature | data | The signature for an unsigned binary. | Default: — | Range: — | |
appStorebooleanApp Store | boolean | — | Default: — | Range: — | |
disabledbooleanDisabled | boolean | If 'true', this app isn't added to the allow list. | Default: false | Range: — | |
Detached Signature | data | The signature for an unsigned binary. | Default: — | Range: — | |
appStorebooleanApp Store | boolean | — | Default: — | Range: — | |
disabledbooleanDisabled | boolean | If 'true', this app isn't added to the allow list. | Default: false | Range: — | |
| array | The paths to apps in the allow list. This property is deprecated in macOS 10.15 and later - use 'pathAllowList' instead. | Default: — | Range: — | ||
| string | A path. | Default: — | Range: — | ||
| array | The paths to apps in the deny list. This property is deprecated in macOS 10.15 and later - use 'pathDenyList' instead. | Default: — | Range: — | ||
| string | A path. | Default: — | Range: — | ||
| array | The allow list of app item dictionaries. | Default: — | Range: — | ||
allowListItemdict | dict | A dictionary defining an app for parental control. | Default: — | Range: — | |
bundleIDstringrequired | string | The bundle ID of the app. | Default: — | Range: — | |
| data | The identifier of the app. Obtain this value from the Security framework using 'SecCodeCopyDesignatedRequirement'. | Default: — | Range: — | ||
| data | The signature for an unsigned binary. | Default: — | Range: — | ||
disabledboolean | boolean | If 'true', this app isn't added to the allow list. | Default: false | Range: — | |
subAppsarray | array | An array of nested helper applications. | Default: — | Range: — | |
allowListItemdict | dict | A dictionary defining an app for parental control. | Default: — | Range: — | |
bundleIDstringrequired | string | The bundle ID of the app. | Default: — | Range: — | |
appIDdatarequired | data | The identifier of the app. Obtain this value from the Security framework using 'SecCodeCopyDesignatedRequirement'. | Default: — | Range: — | |
| data | The signature for an unsigned binary. | Default: — | Range: — | ||
disabledboolean | boolean | If 'true', this app isn't added to the allow list. | Default: false | Range: — | |
displayNamestring | string | The name used for display purposes. | Default: — | Range: — | |
displayNamestring | string | The name used for display purposes. | Default: — | Range: — | |
| array | The paths to apps in the deny list. | Default: — | Range: — | ||
pathDenyListItemstringrequired | string | A path. | Default: — | Range: — | |
| array | The paths to apps in the allow list. | Default: — | Range: — | ||
pathAllowListItemstringrequired | string | A path. | Default: — | Range: — |