Create an iOS Supervised Restrictions Policy

When you enroll a company-owned iOS, iPadOS, or macOS device via Apple’s Automated Device Enrollment, the device automatically becomes supervised. Enrolling iOS and iPadOS devices using Apple Configurator can also result in the device being supervised. Devices that are already set up can’t be supervised after setup, and instead you must erase and supervise the devices during Setup Assistant. Supervision gives you greater control over how your devices are configured and used. You can also create a supervised policy to enforce specific restrictions, such as prohibiting access to the Game Center or restricting access to the App Store.

This policy controls how supervised devices can support restrictions that are unavailable for other enrollment types. This policy provides for controls in two areas: security of the device and Admin control of the device. When this policy is applied to an iPhone or iPad, it will restrict a number of settings on supervised devices. Devices must be enrolled in MDM and running iOS 13 or later for all configurations of this policy.
 

To create a Supervised Restrictions policy for iOS:

1. Log in to the JumpCloud Admin Portal: https://console.jumpcloud.com/login.
2. Go to DEVICE MANAGEMENT > Policy Management.
3. In the All tab, click (+).
4. On the New Policy panel, select the iOS tab.
5. Select the Supervised Restrictions policy from the list, then click configure.
6. In the Policy Name field, enter a name for this policy.
7. Under Admin Settings for Supervised Devices, select the options that you want to block or restrict.
8. Under Security Settings for Supervised Devices, select the options that you want to block or restrict.  

9. (Optional) Select the Device Groups tab. Select one or more device groups where you’ll apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
10. (Optional) Select the Devices tab. Select one or more devices where you’ll apply this policy.
11. Click save.