Relution Signet Customer Hub

Restrictions

Below is an overview of the available visionOS restrictions.

Most restrictions require visionOS 2 (hint visionOS 2+ in the form); different minimum versions such as visionOS 1.1+, visionOS 2.4+ or visionOS 26+ are stated in the overview below. Restrictions marked Supervised only take effect on supervised devices, while restrictions marked Supports user enrollment also take effect on devices with user enrollment; both are marked accordingly in the overview. The AI feature restrictions are marked Deprecated in the portal.

By default, all options are enabled except on-device-only dictation, the two contact options under Managed Apps and Documents, applying the Allow opening … settings to copy and paste, AirDrop targets considered as unmanaged, Force Automatic Date and Time and Force WiFi whitelisting. The Allowed external integration workspace IDs list is empty. With the default values, all features are therefore allowed; only Force authentication before auto fill is enabled by default, so authentication is required before autofill.

The download icon at the top of the form (Export restrictions as CSV file) downloads the configured values, including unsaved changes, as a CSV file.

Of the Recommended restrictions for iOS/iPadOS →, only the notes on Erase All Content and Settings, Force Automatic Date and Time and Force WiFi whitelisting also apply to visionOS.

Device

Show all restrictions
  • Allow Touch ID / Face ID for unlock
    • When disabled, the device cannot be unlocked using Touch ID or Face ID. If unlocking is re-enabled, the feature must be set up again in the settings.
    • Only effective on supervised devices (Supervised).
  • Enable Activity Continuation
    • When disabled, other devices cannot hand off actions to this device via Handoff.
  • Allow AirDrop
    • When disabled, AirDrop cannot be used.
    • Only effective on supervised devices (Supervised).
  • Perform dictation on the device only, do not connect to Siri servers
    • When enabled, connections to Siri servers for dictation are disabled.
    • Also effective with user enrollment (Supports user enrollment).
  • Allow Password Sharing
    • When disabled, users may not share their passwords via AirDrop.
    • Only effective on supervised devices (Supervised).
  • Allow Access to Network Devices in the Files app
    • When not allowed, the system prevents connections to network drives in the Files app.
    • Only effective on supervised devices (Supervised).

Apps

The app restrictions are grouped by area of use.

General

Show all restrictions
  • Allow Enterprise App Trust
    • When disabled, the Trust Enterprise Developer button under Settings → General → Profiles & Device Management disappears; this protects apps from being deployed via Universal Provisioning Profiles. This restriction applies to Free Developer Accounts, but not to trusted Enterprise App Developers, since their apps are pushed via MDM. Likewise, revoking trust that has already been granted is not possible.
    • Only effective on supervised devices (Supervised).
  • Allow installing apps
    • When disabled, the App Store cannot be used and its icon is removed from the home screen. Users are not able to install or update applications.
    • Only effective on supervised devices (Supervised).
  • Allow App Store
    • When the App Store is prohibited, its icon is removed from the home screen. Users can still install and update apps via iTunes or Configurator.
    • Only effective on supervised devices (Supervised).
  • Allow system app removal
    • When disabled, removing system apps is not permitted.
    • Only effective on supervised devices (Supervised).
  • Force authentication before auto fill
    • When disabled, the user does not need to authenticate before passwords or credit card information are automatically filled in Safari or other apps. If this restriction is disabled, the user can toggle this feature in the settings. Only supported on devices with Face ID or Touch ID.
    • Only effective on supervised devices (Supervised).
  • Allow Password AutoFill
    • When this setting is disabled, users cannot use the autofill passwords feature and are not prompted in Safari and other apps to use a saved password. In addition, strong passwords are no longer generated automatically or suggested to users.
    • Only effective on supervised devices (Supervised).
  • Allow modification of Touch ID or Face ID
    • When this option is disabled, the system prevents the user from changing Touch ID or Face ID.
    • Only effective on supervised devices (Supervised).

Safari

Show all restrictions
  • Enable autofill
    • Disables AutoFill in the Safari browser.
    • Only effective on supervised devices (Supervised).
  • Allow Safari content summarization
    • When disabled, Apple Intelligence cannot generate summaries of content.
    • Requires visionOS 2.4 or later and only effective on supervised devices (visionOS 2.4+, Supervised).
  • Allow clearing browsing history in Safari
    • When not allowed, the system disables the ability to clear the Safari browsing history.
    • Requires visionOS 26 or later and only effective on supervised devices (visionOS 26+, Supervised).
  • Allow private browsing in Safari
    • When not allowed, the system disables the ability to use private browsing in Safari.
    • Requires visionOS 26 or later and only effective on supervised devices (visionOS 26+, Supervised).

Siri

Show all restrictions
  • Allow Siri
    • When disabled, Siri is not available.
    • Also effective with user enrollment (Supports user enrollment).

Other apps

Show all restrictions
  • Allow Mail Summary
    • When disabled, summaries of email messages cannot be created manually. Automatically generated summaries are not affected.
    • Requires visionOS 2.4 or later and only effective on supervised devices (visionOS 2.4+, Supervised).
  • Allow smart replies in Mail
    • When disabled, Apple Intelligence cannot generate Smart Reply suggestions in Mail.
    • Requires visionOS 2.4 or later and only effective on supervised devices (visionOS 2.4+, Supervised).

Managed apps and documents

These settings control the exchange of data between managed and unmanaged apps.

Managed apps and documents restrictions

Show all restrictions
  • Allow opening managed documents in unmanaged apps
    • When disabled, documents from managed apps and accounts cannot be opened in unmanaged apps and accounts.
    • Also effective with user enrollment (Supports user enrollment).
  • Allow unmanaged apps to read managed contacts
    • When enabled, unmanaged apps are allowed to read managed contacts. If Allow opening managed documents in unmanaged apps is enabled, the option is greyed out in the form and has no effect.
    • Also effective with user enrollment (Supports user enrollment).
  • Allow managed apps to write unmanaged contacts
    • When enabled, managed apps are allowed to create unmanaged contacts. If Allow opening managed documents in unmanaged apps is enabled, the option is greyed out in the form and has no effect.
  • Allow opening unmanaged documents in managed apps
    • When disabled, documents from unmanaged apps and accounts cannot be opened in managed apps and accounts.
    • Also effective with user enrollment (Supports user enrollment).
  • Also apply the Allow opening … settings for copy and paste
    • When enabled, the restrictions Allow opening managed documents in unmanaged apps and Allow opening unmanaged documents in managed apps also control whether information copied from managed applications can be pasted into unmanaged applications and/or vice versa.
    • Also effective with user enrollment (Supports user enrollment).
  • Allow managed apps to use iCloud sync
    • When disabled, managed apps are prevented from using iCloud synchronization.
    • Also effective with user enrollment (Supports user enrollment).
  • AirDrop targets considered as unmanaged
    • When enabled, all AirDrop destinations are always treated as unmanaged.
    • Also effective with user enrollment (Supports user enrollment).

Settings

The following restrictions apply to the system settings of the device.

Settings restrictions

Show all restrictions
  • Send diagnostic and usage data to Apple
    • When disabled, the device is prevented from automatically sending diagnostic and usage data to Apple.
    • Also effective with user enrollment (Supports user enrollment).
  • Allow personalized advertising from Apple
    • When disabled, personalized advertising from Apple is not shown.
  • Allow users to accept untrusted TLS certificates
    • When disabled, untrusted HTTPS certificates are automatically rejected without prompting the user first.
    • Requires visionOS 1.1 or later (visionOS 1.1+).
  • Allow screen shots and screen recordings
    • When disabled, screenshots and screen recordings cannot be taken. In addition, screen mirroring is not available in the Classroom app.
    • Also effective with user enrollment (Supports user enrollment).
  • Allow user to install configuration profiles
    • When disabled, no configuration profiles or certificates can be installed.
    • Only effective on supervised devices (Supervised).
  • Allow enabling Restrictions and ScreenTime in Settings
    • When disabled, the Enable Restrictions option in Settings is not available. In addition, enabling Screen Time is not available, and if already active, the feature is disabled.
    • Only effective on supervised devices (Supervised).
  • Enable Erase All Content and Settings
    • When disabled, the Erase All Content and Settings option is hidden from the reset menu.
    • Only effective on supervised devices (Supervised).
  • Force Automatic Date and Time
    • When this setting is enabled, the date and time settings are set to automatic and cannot be changed by the user. Note: the device’s time zone can only be updated if the device can determine its location (Wi-Fi connection with location settings required).
    • Only effective on supervised devices (Supervised).

Media

The following restrictions apply to media content and its playback.

Media restrictions

Show all restrictions
  • Allow use of camera
    • When disabled, the camera icon is removed from the home screen, and it is no longer possible to take photos or videos in any app.
    • Only effective on supervised devices (Supervised).
  • Allow FaceTime conferencing
    • When disabled, FaceTime video calls cannot be made.
    • Only effective on supervised devices (Supervised).

Modifications

These restrictions define which settings may be changed on the device.

Modifications restrictions

Show all restrictions
  • Allow Account modification
    • When disabled, account modifications are not possible in the settings.
    • Only effective on supervised devices (Supervised).
  • Allow passcode modification
    • When disabled, the device passcode cannot be added, changed, or removed.
    • Only effective on supervised devices (Supervised).
  • Allow device name modification
    • When disabled, the device name cannot be changed.
    • Only effective on supervised devices (Supervised).
  • Allow modification of notification settings
    • When disabled, changing notification settings is not possible.
    • Only effective on supervised devices (Supervised).
  • Allow settings modification in app analytics
    • When disabled, the settings for sending diagnostic data cannot be changed.
    • Only effective on supervised devices (Supervised).
  • Force WiFi whitelisting
    • Devices can only join Wi-Fi networks that are defined as a Wi-Fi configuration in the policy.
    • Only effective on supervised devices (Supervised).
  • Allow VPN configurations creation
    • When disabled, it is not possible to create VPN configurations.
    • Only effective on supervised devices (Supervised).

iCloud

The following restrictions apply to the iCloud services on the device.

iCloud restrictions

Show all restrictions
  • Allow iCloud backup
    • When disabled, iCloud backups of the device are not possible.
    • Only effective on supervised devices (Supervised).
  • Allow iCloud keychain synchronisation
    • When disabled, iCloud keychain synchronization cannot be used.
    • Only effective on supervised devices (Supervised).
  • Allow iCloud Photo Library
    • When disabled, iCloud Photo Library is not available. Photos that have not been fully downloaded yet are deleted from local storage.
    • Only effective on supervised devices (Supervised).
  • Allow iCloud documents & data
    • When disabled, syncing of iCloud documents and data is not possible.
    • Only effective on supervised devices (Supervised).
  • Allow iCloud private relay
    • When disabled, internet traffic is not routed through iCloud Private Relay, and the device’s IP address is visible to websites and network providers.
    • Only effective on supervised devices (Supervised).

AI feature restrictions

These restrictions control the Apple Intelligence features.

General

Show all restrictions
  • Allow Genmoji creation
    • When disabled, Apple Intelligence cannot create personalized Genmoji.
    • Requires visionOS 2.4 or later and only effective on supervised devices (visionOS 2.4+, Supervised).
  • Allow image generation
    • When disabled, Apple Intelligence cannot generate images.
    • Requires visionOS 2.4 or later and only effective on supervised devices (visionOS 2.4+, Supervised).
  • Allow Apple Intelligence writing tools
    • When disabled, Apple Intelligence’s writing features (e.g. rewriting, proofreading, or summarizing text) are not available.
    • Requires visionOS 2.4 or later and only effective on supervised devices (visionOS 2.4+, Supervised).
  • Allow using image wand
    • When disabled, Apple Intelligence cannot create images from sketches or descriptions using Image Wand.
    • Requires visionOS 2.4 or later and only effective on supervised devices (visionOS 2.4+, Supervised).
  • Allow using external, cloud-based intelligence services
    • Enables the use of external, cloud-based Intelligence services with Siri.
    • Requires visionOS 2.4 or later; also effective with user enrollment (visionOS 2.4+, Supports user enrollment).
  • Allow signing in to external intelligence providers
    • Disabling this flag always puts external Intelligence providers into anonymous mode. If a user is already signed in to an external Intelligence provider, applying this restriction signs them out.
    • Requires visionOS 2.4 or later; also effective with user enrollment (visionOS 2.4+, Supports user enrollment).
  • Allowed external integration workspace IDs
    • Currently limited by Apple to a single entry. If specified, Apple Intelligence only allows this workspace ID for the external integration and requires sign-in.
    • Requires visionOS 2.4 or later and only effective on supervised devices (visionOS 2.4+, Supervised).