You can control which apps are visible on supervised iOS and iPadOS devices by configuring an allow list or block list through the Restrictions Device Setting. This is useful for enforcing app policies on shared devices, kiosks, or any managed fleet where app access needs to be standardized.
Note: Both Allow Listed Apps and Block Listed Apps require the device to be supervised and running iOS 9.3+ or tvOS 11+.
Understanding the Two Settings
Before configuring the Device Setting, choose the approach that fits your use case:
-
Allow Listed Apps — The device will only show the apps you specify. All other apps are hidden from the end user. Use this when you want to strictly limit what users can access (e.g., a kiosk or shared classroom device).
- Example: In the screenshot below only PayPal is added to the allow list.
- Example: In the screenshot below only PayPal is added to the allow list.
-
Block Listed Apps — The device will hide only the apps you specify. All other apps remain visible. Use this when you want to restrict a small number of specific apps without affecting everything else.
- Example: In the screenshot below only PayPal is added to the block list.
- Example: In the screenshot below only PayPal is added to the block list.
Note: The Settings app will always appear on the device regardless of which setting you use — it cannot be blocked or hidden.
How to Configure the Device Setting
- Navigate to Catalog > Device Settings and click New.
- Select Restrictions.
- Enter a Payload Name to identify the Device Setting.
- Click the Apps tab and locate the Allow Listed Apps or Block Listed Apps setting under the iOS and tvOS section.
- Enable the checkbox next to the setting you want to configure.
- Add apps to the list using one of the following methods:
- Native Apps — Search for built-in Apple apps.
- App Store — Search for App Store apps by name.
- Add Bundle ID — Manually enter the Bundle ID if the app doesn't appear in the search results. See How to Get the Team ID, Bundle ID, and Code Requirement if you need help finding a Bundle ID.
- Click Create Profile, then assign it to the appropriate policy.