Managing iOS profiles with the Shared iPad type in the Mobile Security Portal
Last adaptation to the version: 2.21 (09.2026)
New:
notempty
This article refers to a Beta version
Preamble
In a profile permissions, restrictions, password requirements, email settings and security settings are configured.
Several users or user groups (roles) can be assigned to a profile.
Several devices or device groups (devices designated by tags) can be assigned to a profile.
notempty
For a large number of devices and users it is recommended to map the assignment via groups.
- Device registration is directly tied to a profile
- A profile must be created first' (and configured) before a device can be registered
In Android Enterprise profiles, numerous security-relevant settings can be made, e.g.
- Disable Kamara
- Disable microphone
- Disable USB file transfer
- Disable outgoing calls
- Disable Bluetooth
- Disable contact sharing
- Disable tethering
- Disable sms
- Enable network only with VPN
- and much more.
notempty
Android Enterprise Profiles are used immediately and do not need to be published!
Note on previous Android profiles
hide
Klicken für dauerhafte Anzeige
- Outdated Android profiles behave fundamentally different than Android Enterprise Profiles (EMM)
- It is no longer possible to assign a profile to a role, user or tag
Overview of profile management | ||||
| In the profile overview new profiles can be created, existing ones can be edited and deleted. The view of the profiles can be displayed in the list or tile view. You can also view details of existing profiles, update the list of profiles, and publish profiles. |  Overview of profile management iOS
|
 Overview of profile management Android
| ||
General Options | ||||
| Filters on profile tiles that contain the search text | ||||
| Sort |
Clicking this button opens a menu where you can sort the tiles according to specific criteria | |||
| Sort |
Clicking this button opens a menu where you can sort the tiles according to specific criteria | |||
Sorts the tiles by profile name | ||||
Sorts the tiles according to the priority of the profile | ||||
Sorts the tiles in ascending or descending order according to the selected criterion | ||||
| Add profile | Creates a new profile. The settings in the profile vary depending on the operating system. | |||
| Import profile | Existing profiles that were previously exported from the Securepoint Mobile Security Portal can be imported here | |||
| Hide generated profiles | Hides the generated profiles | |||
| Show details | Show / hide details: For a large number of profiles, it can be useful to hide the most important details for clarity. | |||
| / List view / Grid view | Switch between lists and grid view | |||
| Refresh | Refreshes the display | |||
Profile tile
| ||||
Profile-Options
| ||||
| The button at the top right of each profile tile provides the following options: | ||||
| Edit | Editing the settings (see below) | |||
| Copy | Copying the profile to the clipboard | |||
| Export | Exporting the settings | |||
| Delete | The profile is deleted notempty Android profiles that have at least one assigned device cannot be deleted.New as of: 2.5 | |||
Details displayed in the profile tile: | ||||
| Updated | Changes have been made to the profile that have not yet been published! | |||
| Partially installed | Not all sub profiles were able to be installed | |||
Profile information | ||||
| Type | Profile type (see below) | |||
| Roles | Roles | |||
| Users | User | |||
| Devices | Devices | |||
| tags | Tags | |||
| Parts | Listing of the sub-profiles that make up the complete Mobile Security Profile. | |||
Copy & paste of profiles
| ||||
| Click on the logo of the profile tile to mark one or more profiles In the general options, another field now appears under the filter mask: | ||||
| Action for selected items | Execute the selected action with Ok | |||
| Copies one or more selected profiles to the clipboard | ||||
| Deletes one or more selected profiles notempty Android profiles that have at least one assigned device cannot be deleted.New as of: 2.5 | ||||
| Paste | Inserts a copy of a profile from the clipboard
| |||
General
Add profile
| Caption | Value | Description |  General menu item
|
|---|---|---|---|
| Type | Device profile | Standard device profile | |
| Shared iPad | Profile that allows different users for one iPad | ||
| Apple TV profiles | Profile with limited settings options. Additional settings for Apple TV | ||
| User Enrollmant profile | Profile owned by the user on which managed apps of the company can be installed | ||
| Name | Name | Profile name | |
| Priority | 5 | The higher the number, the higher the priority. This is only used if a device is assigned to multiple profiles. | |
| Roles | Add roles | Click-Box: The profile will be assigned to all devices of all users with these roles | |
| Users | Add users | The profile will be assigned to all devices from these users | |
| Devices | Add devices | The profile will be assigned to these devices | |
| Tags | Add tags | The profile will be assigned to all devices with these tags | |
| Comment | Comment | Comment | |
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
Restrictions
| Caption | Value | Description |
|---|---|---|
Device Security & Data Privacy
| ||
| Allow automatic unlocking | When enabled , it allows automatic unlocking for quick device access (e.g., via Apple Watch)
However, it increases the risk in the event of loss or unauthorized access | |
| Allow Control Center on Lock Screen | When enabled , it allows access to the Control Center directly from the lock screen
This facilitates quick actions (Wi-Fi, flashlight) but can allow unwanted changes without authentication | |
| Allow notification view on lock screen | When activated , it enables the display of past notifications on the lock screen.
This improves the visibility of important information but increases the risk that sensitive content may be viewed by third parties | |
| Allow Today View on Lock Screen | When enabled , it allows the "Today" view to be displayed on the lock screen.
This provides an at-a-glance view of widgets and appointments but may expose operational data without unlocking the device | |
| Force encrypted backups | When enabled , it encrypts all device backups.
This protects corporate data in local backups (Finder/iTunes) and secures sensitive app data | |
| Restrict Ad Tracking | When enabled , it limits ad and app tracking to enhance privacy
Reduces cross-app and cross-website tracking (ATT) and supports compliance | |
| Allow Find My Device | When activated , Find My Device is allowed in the Find My app | |
| Allow Find My Friends | When activated , Find My Friends is allowed in the Find My app | |
| Allow trusting enterprise apps | When activated , it disables the "Trust Enterprise Developer" button (Settings > General > Profiles & Device Management) and prevents users from manually marking apps outside the App Store and MDM as trusted.
This prevents shadow IT and ensures that only apps distributed and signed via MDM are used | |
| Allow Screenshots and Screen Recordings | When activated , it allows the user to take screenshots and screen recordings | |
| Wallet Notifications on Lock Screen | When activated , it enables wallet notifications on the lock screen.
This displays, for example, boarding passes/receipts without unlocking but may expose sensitive payment information | |
| Allow Mail Privacy Protection | When activated , it enables the "Mail Privacy Protection" option in "Mail".
Hides IP addresses and opening times (tracking pixels) | |
| Allow unlocking with Touch & Face ID | When activated , it allows biometric unlocking | |
| Allow changing Touch & Face ID | When activated , it allows changing Touch & Face IDs | |
| Allow sending diagnostic data | When activated , it allows the automatic sending of diagnostic reports to Apple.
This supports troubleshooting and stability but may share telemetry data outside the company | |
| Allow changing diagnostic settings | When activated , it allows changes to diagnostic and analysis settings.
May bypass compliance requirements; usually deactivated in regulated environments | |
Network & Connectivity
| ||
| Allow network access for files | When activated , it allows connection to network drives in the "Files" app | |
| Allow changing Bluetooth settings | When activated , it allows changes to Bluetooth settings | |
| Allow changing mobile data usage for apps | When activated , it allows adjusting mobile data usage settings for apps | |
| Allow accepting untrusted TLS certificates | When activated , it allows the user to accept untrusted TLS certificates.
When deactivated, the device rejects unconfirmed HTTPS certificates without prompting | |
| Allow Handoff | When activated , it allows the continuation of activities between devices.
This improves cross-platform workflow (iPhone ⇄ iPad ⇄ Mac) but may expose content outside the managed device context | |
Cloud & SynchronizationCloud & Synchronization | ||
| Allow iCloud Photos | When activated , it allows the use of iCloud Photos.
This automatically backs up photos/videos and makes them available across devices but may lead to data leakage into private Apple IDs | |
| Allow iCloud Backup | When activated , it allows device backups via iCloud | |
| Allow automatic synchronization during roaming | When activated , it allows data synchronization during roaming.
This keeps apps and files up to date for field service/travel but may incur high roaming costs and increased battery/data usage | |
| Allow backup of Enterprise Books | When activated , it allows backing up Enterprise Books | |
| Allow synchronization of notes/highlights in Enterprise Books | When activated , it allows synchronization of notes and highlights in Enterprise Books | |
App & Purchase RestrictionsApp & Purchase Restrictions | ||
| Allow In-App Purchases | When activated , it allows making purchases within apps
notempty
Only relevant if purchases with private Apple ID are allowed | |
| Allow Multiplayer Gaming | When activated , it allows playing multiplayer games | |
| Require iTunes password for all purchases | When activated , it requires the iTunes password for every purchase
notempty
Only relevant if purchases with private Apple ID are allowed | |
Siri & DictationSiri & Dictation | ||
| Allow Siri | When activated , it allows the use of Siri | |
| Allow Siri on Lock Screen | When activated , it allows the use of Siri on a locked device.
Allows voice commands from the lock screen; depending on the request, Siri may still require unlocking for personal data/actions | |
| Allow Siri access to user-generated content | When activated , it allows Siri to query and use user-generated content from the web.
Expands responses to include content from forums/social networks but increases the risk of inappropriate or unreliable information | |
| Allow Dictation | When activated , it allows dictation input on the device | |
| On-Device Dictation | When activated , speech input is processed entirely on the device without contacting Siri servers.
This enhances privacy and offline capability but may limit language coverage/features compared to server dictation | |
| Force translation on the device only | When activated , it processes translations entirely on the device.
This protects confidential content and works offline but may increase computational load and sometimes result in lower quality or language support | |
| Allow QuickPath Keyboard | When activated , it activates the QuickPath keyboard for smooth typing by swiping | |
Content & EntertainmentContent & Entertainment | ||
| Allow Apple Music | When activated , it allows the use of Apple Music in the Music app | |
| Allow iTunes Radio | When activated , it allows the use of iTunes Radio in the Music app | |
| Allow News App | When activated , it allows access to the News app | |
| Set App Age Rating | Allow All Apps | Sets the highest allowed app age rating
Show options for setting app age ratings hide Klicken für dauerhafte Anzeige Allow All Apps 17+ 12+ 9+ 4+ Allow Nothing
|
| Set Movie Age Rating | All Movies | Sets the highest allowed movie age rating (FSK)
Show options for setting movie age ratings hide Klicken für dauerhafte Anzeige All Movies FSK 18 FSK 16 FSK 12 FSK 6 FSK 0 No Movies
|
| Set TV Show Age Rating | All TV Shows | Sets the highest allowed TV show age rating
Show options for setting TV show age ratings hide Klicken für dauerhafte Anzeige All TV Shows 18+ 16+ 12+ 6+ 0+ No TV Shows
|
Safari Browser SettingsSafari Browser Settings | ||
| Allow Cookies in Safari | Only from current website (iOS 8) or visited sites (pre-iOS 8) | Options for setting cookie acceptance in Safari
Show options for accepted cookies in Safari hide Klicken für dauerhafte Anzeige Only from current website (iOS 8) or visited sites (pre-iOS 8) Never Websites I visited Always
|
| Allow JavaScript | When activated , it enables the execution of JavaScript in Safari.
This is essential for modern web apps; deactivation increases security but breaks interactive functions | |
| Allow Pop-ups | When activated , it allows pop-up windows in Safari.
This is sometimes necessary for authentication flows, downloads, or print dialogs of older portals but increases the risk of ads/phishing | |
| Enable Fraud Warning | When activated , it activates the Safari fraud warning | |
System & MiscellaneousSystem & Miscellaneous | ||
| Allow OTAPKI Updates | ||
| Allow Temporary Sessions (Shared iPad) | When activated , it allows temporary sessions on "Shared iPad" devices.
This supports spontaneous use without permanent accounts (e.g., training/kiosk). Local data is deleted after logout | |
| Force AirPlay Pairing Password (Outgoing) | When activated , a pairing password is required for all devices receiving AirPlay requests from this device; prevents unauthorized screen sharing | |
| Allow Changing Device Name | When activated , it allows changing the device name | |
| Allow Voice Dialing When Device is Locked | When activated , it allows voice dialing when the device is locked | |
| Force Apple Watch Wrist Detection | When activated , it enforces wrist detection on paired Apple Watches.
Automatically locks the watch when removed (e.g., for Apple Pay/unlocking) and prevents access by unauthorized users | |
| Allow Pairing with Apple Watch | When activated , it allows pairing with an Apple Watch | |
| Allow Web Results in Spotlight | When activated , it allows web search results in Spotlight and Siri suggestions.
This improves research and quick access but may display uncurated web content and potentially sensitive search terms | |
| Allow Personalized Advertising | When activated , it enables personalized advertising features.
Increases relevance in Apple ads but reduces privacy through profiling and may conflict with compliance requirements | |
| Allow Camera Usage | When activated , it allows the user to use the camera.
Deactivating locks the camera for all applications | |
| Allow Changing Notification Settings | When activated , it allows changing notification settings | |
Data FlowData Flow | ||
| Allow Managed Apps to Write to Unmanaged Contacts | When activated , it allows managed apps to write contacts to unmanaged accounts.
This facilitates caller identification in private apps but may lead to data flow from the managed area to personal address books | |
| Allow Unmanaged Apps to Read Managed Contacts | When activated , it allows unmanaged apps to access contacts stored in managed accounts.
This increases convenience in private apps (e.g., caller identification) but may expose managed contacts to unmanaged apps | |
| Allow iCloud Synchronization for Managed Apps | When activated , it allows managed apps to synchronize data via iCloud | |
| Allow Opening from Unmanaged Sources in Managed Apps | When activated , it allows opening documents from unmanaged apps in managed apps.
This facilitates collecting external files (e.g., from system apps like Camera, Contacts, etc.) into the protected container but may import potentially harmful or private content | |
| Allow Opening from Managed Sources in Unmanaged Apps | When activated , it allows opening documents from managed apps in unmanaged apps.
This reduces friction in mixed workflows but poses a high compliance risk | |
| Managed Clipboard | When activated , it enforces that the clipboard distinguishes between managed and unmanaged sources | |
| Treat AirDrop as Unmanaged Destination | When activated , it enforces that AirDrop transfers are treated as 'unmanaged'.
In combination with Allow opening from managed sources in unmanaged apps deactivated, sharing via AirDrop from managed apps is prevented | |
Classroom-App
The Classroom App is available free of charge in the App-Store and offers possibilities for use in school classes.
Important restrictions can be configured here.
Show restrictions
Hide restrictions
| 1. | 2. | 3. |
| Abb.1 | Abb.2 | Abb.3 |
| Abbildungen | ||
| Restrictions | Default | Explanation |
|---|---|---|
| Allow remote screen monitoring | When activated , remote screen monitoring via the Classroom app is enabled.
If screenshots are disabled, remote screen monitoring is also disabled | |
| Force automatic course enrollment | When activated , it automatically approves requests from instructors | |
| Leaving classes only with permission | When activated , it requires students in unmanaged courses to obtain instructor permission before leaving the course | |
| Enforce app and device locking without prompting | When activated , it allows instructors to lock apps or the device without student confirmation | |
| Force screen monitoring without prompting | When activated , it automatically grants instructors in managed courses permission to monitor students' screens.
Only works if remote screen monitoring is allowed |
Restrictions for supervised devices
Restrictions for supervised devices
| Restriction | Default | Explanation |
|---|---|---|
App Usage & Installation
| ||
| Restrict App Usage | Allow all apps | Allow all apps, blocklist, or allowlist
Show options for restricting app usage hide Klicken für dauerhafte Anzeige Allow all apps Do not allow certain apps Allow only certain apps
Show additional configurations when selecting "Do not allow certain apps"
|
| Blocked apps | Select application | Select the apps to be blocked Multiple apps can be selected |
| Add system apps | All system apps are added.
System apps can then be removed individually. | |
| Erlaubte Apps | Select application | Select the apps to be allowed Multiple apps can be selected |
| Add system apps | All system apps are added.
System apps can then be removed individually. | |
| Single App Mode: Allowed Apps | Select application | List of apps allowed to run in single app mode |
| Allow removing apps | Allows the user to remove apps | |
| Allow app installation via Configurator/iTunes | When deactivated , the system disables the App Store, Configurator, marketplace, etc.
This prevents manual/sideloading installation methods and reduces shadow IT | |
| Allow automatic app downloads | When deactivated , the system prevents automatic downloading of apps purchased on other devices.
This prevents private Apple ID purchases from appearing on corporate devices; useful for BYOD/COBO | |
| Allow app installation from the App Store | When activated , it allows the user to install applications from the App Store | |
| Allow App Clips | When activated , App Clips are enabled.
When deactivated , all App Clips are removed | |
Communication
| ||
| Allow AirDrop | When activated , AirDrop is enabled | |
| Allow AirPrint | When activated , AirPrint is enabled | |
| Allow saving AirPrint credentials | When activated , it allows saving AirPrint login credentials in the iCloud keychain | |
| Allow AirPrint iBeacon detection | When activated , it allows detection of AirPrint printers via iBeacon | |
| Require trusted TLS for AirPrint | When activated , it requires trusted TLS certificates for secure AirPrint communication.
Protects against man-in-the-middle attacks but requires correctly issued certificates on the printers | |
| Allow change of mobile tariff | When activated , it allows changing mobile tariff settings | |
| Allow iCloud keychain synchronization | When activated , it allows iCloud keychain synchronization | |
| Allow private iCloud relay | When activated , iCloud Private Relay is enabled.
This obscures IP/DNS requests for more privacy but may bypass web filter/proxy policies | |
| Allow eSIM changes | When activated , it allows changes to settings related to the mobile tariff | |
| Allow Files app access to USB drives | When activated , it allows the Files app to connect to USB drives.
Facilitates offline data exchange but increases compliance risks | |
| Allow host pairing | When activated , it allows pairing with a computer notempty
If pairing is disabled , the end device can no longer be connected to a computer via USB.
Please ensure that the end device always has a functioning internet connection even without pairing | |
| Allow NFC | When activated , NFC is enabled | |
| Allow changing hotspot settings | When activated , it allows changing personal hotspot settings | |
| Allow VPN creation | When activated , it allows creating VPN configurations | |
| Allow configuration of nearby devices | When activated , it enables the prompt to configure new nearby devices upon proximity.
This accelerates rollouts/transfers but may allow unintended account/settings takeovers from unmanaged devices | |
Data Sharing
| ||
| Allow automatic password filling | When activated , the "AutoFill Passwords" feature is enabled.
This speeds up logins and reduces typing errors; due to domain reference and user confirmation, AutoFill usually does not apply to phishing sites | |
| Enforce authentication before automatic filling | When activated , it requires authentication before passwords or credit card information are autofilled | |
| Allow password requests to nearby devices | When activated , it allows the system to request passwords from nearby devices.
Applies only to Wi-Fi passwords; may allow sharing of network credentials with foreign devices | |
| Allow password sharing | When activated , it allows sharing passwords via AirDrop | |
| Allow account modification | When activated , it allows users to add, remove, or modify accounts (e.g., Apple IDs, internet-based accounts) in settings.
notempty
This option prevents, for example, the creation of another Apple account, which could then be used to install additional apps. notempty
iOS can only activate this restriction for all accounts. This also means that changing a password for an Exchange account is no longer possible. | |
| Allow modification of Find My Friends | When activated , it allows modifications to the settings for "Find My Friends" (within the "Find My" app) | |
Media & Entertainment
| ||
| Allow Podcasts | When activated , the Podcasts app is enabled | |
| Allow explicit content | When activated , it allows access to explicit content.
When activated, the SafeSearch function is switched off by Safari. | |
| Allow iMessage | When activated , iMessage is enabled.
For Wi-Fi-only devices, the "Messages" app is hidden; for cellular devices, the app remains but uses only SMS/MMS | |
| Allow Apple Books Store | When activated , the Apple Books Store is enabled.
Supervised only. If disabled, iBookstore will be disabled | |
| Allow erotica in Apple Books | When activated , it allows downloading books marked as erotica.
Supervised only. If disabled, the user will not be able to download media from the iBookstore marked as erotica | |
| Allow iTunes Store | When activated , the iTunes Music Store is enabled | |
| Allow Safari | When activated , the Safari browser is enabled.
Web Clips cannot be opened with Safari browser disabled | |
| Allow Game Center | When activated , Game Center is enabled | |
| Allow adding Game Center friends | When activated , it allows users to add friends in Game Center | |
| Allow FaceTime | When activated , the FaceTime app is allowed.
Camera usage must also be enabled | |
| Enable Siri profanity filter | When activated , the Siri profanity filter is enabled | |
| Allow AutoFill in Safari | When activated , AutoFill in Safari is enabled | |
| Allow changing wallpaper | When activated , it allows changing the wallpaper | |
| Allow shared albums | When activated , it allows shared photo albums.
This simplifies team-wide sharing. Shared photo albums are limited, stored in reduced resolution, and do not count against iCloud storage | |
System and Device Control
| ||
| Allow removal of system apps | When activated , it allows users to remove system apps.
If set to false, the removal of system apps is disabled | |
| Allow unpaired devices to start in recovery mode | When activated , it allows unpaired devices to start the device in recovery mode.
This can simplify service/repair workflows but reduces protection against unauthorized deletion attempts via USB. If set to false, unpaired external booting for recovery is disabled | |
| Enforce USB restricted mode | When activated , it enforces USB restricted mode, requiring authorization for USB accessories when the device is locked.
If set to false, the restricted USB mode will be disabled | |
| Enforce automatic date and time | When activated , it enforces the "Set Automatically" setting for date and time.
Prevents time manipulation (e.g., to bypass certificate/token checks). If set to true, the date and time are automatically enforced | |
| Enforce Wi-Fi | When activated , it prevents disabling the Wi-Fi function.
Useful for always-on management. If set to true, WLAN is forced only on allowed networks | |
| Allow joining only Wi-Fi networks from profiles |
If set to true, WLAN is forced only on allowed networks | |
| Allow changing device passcode | When activated , it allows changing the device passcode | |
| Allow user installation of configuration profiles | When activated , it allows users to install configuration profiles and certificates via the user interface.
Deactivating reduces the risk of unwanted profiles (e.g., unwanted VPN/Root CA) and enforces MDM-controlled changes. If set to false, the user is prohibited from installing configuration profiles and certificates interactively | |
| Allow reset to factory settings | When activated , the "Erase All Content and Settings" option in Settings is enabled.
Deactivating protects corporate devices from user-initiated wipes. If disabled, the user cannot select the "Clear all content and settings" option in Settings > General > Reset. notempty
A user-initiated "Find My" deletion can still take effect unless separately prevented | |
| Allow changing Screen Time settings | When activated , it allows changing Screen Time settings.
Deactivating prevents local bypassing of restrictions/age ratings. Allow configuration restrictions | |
| Allow iCloud document synchronization | When activated , it allows document synchronization with iCloud.
Deactivating disables document and key-value sync via iCloud; affected apps lose iCloud sync functionality. Allow document synchronization with iCloud | |
| Enforce delayed software updates | When activated , it delays the visibility of software updates for the user.
Suitable for staggered rollouts. When active, user visibility of software updates is delayed. | |
| Delay software updates (in days) | 30 | Sets the number of days by which the visibility of software updates is delayed.
Valid values are 1 - 90 days. With this restriction, the administrator can specify by how many days a software or app update is delayed on the device. With this restriction, the user will not see a software update until the specified number of days after the software update release date. |
Keyboard
| ||
| Enable predictions | When activated , text predictions on the keyboard are enabled.
Allow predictive keyboard. | |
| Enable keyboard shortcuts | When activated , it allows the use of keyboard shortcuts.
Allow keyboard shortcuts. | |
| Enable autocorrect | When activated , autocorrect during input is enabled.
Allow autocorrect. | |
| Enable spell check | When activated , spell check is enabled to underline misspelled words.
Allow correction help. | |
| Enable Look Up | When activated , quick lookup of word definitions is enabled.
Allow correction help. | |
| Enable automatic sleep mode | When activated , it allows the device to automatically switch to sleep mode when inactive.
If set to false, the hibernation of the device is disabled | |
| Enable automatic screensaver | When activated , the automatic screensaver is enabled | |
| Enable pairing with Remote App | When activated , it allows pairing Apple TV with the Remote App or the widget in the Control Center | |
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
Notification settings
| Add settings |
This button allows you to configure how specific apps are allowed to display notifications (e.g., location of display, sounds, alerts, grouping, preview).
Settings are made separately for each app. | ||
| Caption | Value | Description |  Menu item Notification settings
|
|---|---|---|---|
| Application | Enter id | The bundle ID of the application
notempty
Entering an unknown bundle ID can cause problems | |
| Enable notifications | Enables, respectively disables notifications for this app. | ||
| Alert type | Temporary banner | The notification type for notifications for this app: None/Banner/Warning | |
| Permanent banner | |||
| None | |||
| Badges enabled | Allow or disallow for this app. | ||
| Enable critical alerts | When active , critical alerts are enabled that can ignore "Do Not Disturb" and ringer settings for this app. | ||
| Grouping type | Automatic | The notification grouping type | |
| by App | |||
| Off | |||
| Preview type | Always | The notification type preview | |
| When unlocked | Displays the notification only when the device is unlocked | ||
| Never | Never displays the notifications | ||
| Show in CarPlay | When active, notifications are displayed in CarPlay | ||
| Show in lock screen | Determines whether notifications can be displayed in the lock screen | ||
| Show in notification center | Determines whether notifications are displayed in the notification center | ||
| Sounds enabled | Determines if sounds are allowed for this app | ||
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
Apps | |||
Profile created from portal version 1.31 onwardsnotempty
Profile created from portal version 1.31 onwards | |||
| Managing apps and web clips via profiles is outdated and no longer available. Reassigning applications to devices is now done via the menu item . Further information can be found in the Wiki article on iOS apps |
 Apps & Web clips
| ||
Profile created before portal version 1.31notempty
Profile created before portal version 1.31 | |||
notempty
This function is deprecated. In profiles before version 1.31, apps can be removed but not newly added. Reassigning applications to devices is now handled via the menu item in the side menu. This also allows for later uninstallation of the application. Further information can be found in the Wiki article on iOS apps | |||
| Caption | Value | Description |  Apps & Web clips
|
|---|---|---|---|
| Apps |
Securepoint VPN Client | The created apps can only be deleted. New apps cannot be added, Apps are added and removed from an iOS profile via the portal page | |
| Web clips | Securepoint Wiki [Label: SP Wiki] (https://wiki.securepoint.de) | The created Web clips can only be deleted. New Web clips cannot be added, Web clips are added and removed from an iOS profile via the portal page | |
App-Lock (Kiosk mode)
The app lock activates the guided mode which limits the device to a single app. In this state - also called kiosk mode - you can control which app functions are available.
Activate configuration
Show restrictions
Hide restrictions
| 1. | 2. | 3. |
| Abb.1 | Abb.2 | Abb.3 |
| Abbildungen | ||
App-Lock (Kiosk mode) | |||
| Caption | Value | Description |  |
|---|---|---|---|
| Bundle ID | Enter ID | The bundle ID of the application
notempty
Entering an unknown bundle ID can cause problems | |
Options | |||
| Disable Touch Input | If active , the touch screen is disabled | ||
| Disable Auto-Rotation | If active , it prevents the screen orientation from changing when the device is rotated | ||
| Disable Volume Buttons | If active , the physical volume buttons are disabled | ||
| Disable Ringer (Mute) Switch | If active , the physical mute switch is disabled | ||
| Disable Sleep/Wake Button | If active , the physical sleep/wake button is disabled | ||
| Disable Auto-Lock | If active , it prevents the device from automatically locking after a period of inactivity | ||
| Force Enable VoiceOver | If active , the VoiceOver feature is forced enabled | ||
| Enable Zoom | If active , the Zoom feature is forced enabled | ||
| Enable Inverted Colors | If active , the Invert Colors feature is forced enabled | ||
| Enable AssistiveTouch | If active , the AssistiveTouch feature is forced enabled | ||
| Force Enable Speak Selection | If active , the Speak Selection feature is forced enabled | ||
| Force Enable Mono Audio | If active , mono audio is forced on the device | ||
| Force Enable Voice Control | If active , the voice control is forced. | ||
User Enabled Options | |||
| Allow VoiceOver | If active , user control for the VoiceOver customization is allowed | ||
| Allow Zoom | If active , user control for the zoom setting is allowed | ||
| Allow Inverted Colors | If active , user control for inverted colors is enabled | ||
| Allow AssistiveTouch | If active , user control for AssistiveTouch is permitted | ||
| Allow Voice Control | If active , user control for voice control is enabled | ||
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
Email & Exchange Active Sync
Email accountsEmail accounts | |||||||||||||||||||||||||||||||||||||||
| Add account | Multiple mail accounts can be set up in the Email settings section. These settings affect IMAP or POP3 accounts. Settings for Exchange ActiveSync must be made in the corresponding menu item! | ||||||||||||||||||||||||||||||||||||||
| Caption | Value | Description |  Email settings
| ||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Account description | Account description | The display name of the account (e.g. "Company Mail Account") | |||||||||||||||||||||||||||||||||||||
| Account name | Account name | Name of the user to be displayed Variables can be used as well. Show variables overview hide Klicken für dauerhafte Anzeige The values are taken from the user settings of the user to whom the respective device is assigned
The display name can be combined with the variable %device_user_name%. The variable reads from the user settings of the user to whom the respective device is assigned the fields first name and last name. e.g.: %device_user_name% | ttt-Point AG → Martin Müller | ttt-Point AG | |||||||||||||||||||||||||||||||||||||
| Email address | Email address | The address of the account (e.g. "john@company.com") The entry $emailaddress$ reads the email address from the user settings of the user to whom the device is assigned. Variables can be used as well. The entries $variable1$, $variable2$ and $variable3$ can be defined individually. Show variables overview hide Klicken für dauerhafte Anzeige The values are taken from the user settings of the user to whom the respective device is assigned
| |||||||||||||||||||||||||||||||||||||
| Prevent move |
If set to true, messages may not be moved out of this email account into another account. Additionally, replies/forwards via an account other than the original account are blocked. This prevents the mixing of corporate and private mailboxes and supports compliance requirements. | ||||||||||||||||||||||||||||||||||||||
| Disable email recipient synchronization |
If set to true, this account is excluded from address "recent" syncing | ||||||||||||||||||||||||||||||||||||||
| Allow Mail drop |
If set to true, it allows the use of "Mail Drop" Enables large attachments via iCloud link (up to 5 GB, usually available for 30 days) | ||||||||||||||||||||||||||||||||||||||
| Prevent App Sheet |
If set to true, this account will not be available for sending mail in third party applications | ||||||||||||||||||||||||||||||||||||||
| S/MIME Enabled | If set to true, this account will support S/MIME Show further configurations when S/MIME Enabled is active | ||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||
Incoming mails | |||||||||||||||||||||||||||||||||||||||
| Mail server | Mail server | Hostname or IP address | |||||||||||||||||||||||||||||||||||||
| Port | 993 | Port number for incoming mail | |||||||||||||||||||||||||||||||||||||
| Account type | IMAP |
The protocol for accessing the email account | |||||||||||||||||||||||||||||||||||||
| Username | None | The username used to connect to the server for incoming emails Variables can be used as well. $emailaddress$, $username$, $variable1$, $variable2$, $variable3$ Show variables overview hide Klicken für dauerhafte Anzeige The values are taken from the user settings of the user to whom the respective device is assigned
| |||||||||||||||||||||||||||||||||||||
| Path prefix | Path prefix | Path prefix for IMAP mail server | |||||||||||||||||||||||||||||||||||||
| Incoming Mail Server authentication | Password | The authentication method for the incoming mail server None Password CrammD5 NTLM HTTPMD5 | |||||||||||||||||||||||||||||||||||||
| Password | Password | The password for the incoming mail server | |||||||||||||||||||||||||||||||||||||
| Use SSL | Incoming email retrieval via Secure Socket Layer | ||||||||||||||||||||||||||||||||||||||
Outgoing mails | |||||||||||||||||||||||||||||||||||||||
| Mail server | Hostname or IP address for outgoing email | ||||||||||||||||||||||||||||||||||||||
| Port | 587 | The port number for outgoing email | |||||||||||||||||||||||||||||||||||||
| Username | The username used to connect to the server for outgoing mail Variables can be used as well. $emailaddress$, $username$, $variable1$, $variable2$, $variable3$ Show variables overview hide Klicken für dauerhafte Anzeige The values are taken from the user settings of the user to whom the respective device is assigned
| ||||||||||||||||||||||||||||||||||||||
| authentication type | Password | The authentication method for the outgoing mail server None CrammD5 NTLM HTTPMD5 | |||||||||||||||||||||||||||||||||||||
| Outgoing Password: Same as incoming | SMTP authentication uses the same password as POP/IMAP server for incoming emails Show further configurations when Outgoing Password is deactivated | ||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||
| Use SSL | Send outgoing email through Secure Socket Layer | ||||||||||||||||||||||||||||||||||||||
Exchange accountsExchange accounts | |||||||||||||||||||||||||||||||||||||||
| Add account | Configuration for Exchange mails retrieved via https connections | ||||||||||||||||||||||||||||||||||||||
| Caption | Value | Description |  Settings Exchange ActiveSync
| ||||||||||||||||||||||||||||||||||||
| Account name | The display name of the user (e.g. "John Appleseed"). Different variables can be used. Show variables overview hide Klicken für dauerhafte Anzeige The values are taken from the user settings of the user to whom the respective device is assigned
| ||||||||||||||||||||||||||||||||||||||
| Exchange ActiveSync Host | Enter host | Host name or IP address of the Exchange server | |||||||||||||||||||||||||||||||||||||
| Number of days in which emails from the past are synchronized | For ever | Synchronization period | |||||||||||||||||||||||||||||||||||||
| Use SSL | If activated , all communication is sent via Secure Socket Layer | ||||||||||||||||||||||||||||||||||||||
| Email address | None | The address of the account to be synchronized (e.g. "john@company.com") Variables can be used as well. The entries $variable1$, $variable2$ and $variable3$ can be defined individually. Show variables overview hide Klicken für dauerhafte Anzeige The values are taken from the user settings of the user to whom the respective device is assigned
| |||||||||||||||||||||||||||||||||||||
| Domain\User | Mail domain and mail user
| ||||||||||||||||||||||||||||||||||||||
| Password | Password | The password for the account | |||||||||||||||||||||||||||||||||||||
| Use OAuth | Specifies whether the connection should use OAuth for authentication. notempty Show additional configurations if Use OAuth is activated
If OAuth is specified, the password field should remain blank | ||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||
| Payload certificate UUID |
None | UUID of the certificate that is used for authentication notempty The user certificate usercertuser_certusercert can be used
New as of: 2.7 | |||||||||||||||||||||||||||||||||||||
| Prevent move |
If set to true, messages may not be moved out of this email account into another account | ||||||||||||||||||||||||||||||||||||||
| Prevent App Sheet |
If set to true, this account will not be available for sending mail in third party applications | ||||||||||||||||||||||||||||||||||||||
| Allow Mail drop |
If set to true, this account is allowed to use Mail Drop | ||||||||||||||||||||||||||||||||||||||
| S/MIME Enabled |
If set to true, this account will support S/MIME Show further configurations when S/MIME Enabled is active | ||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||
| Disable email recipient synchronization | If this value is set to true, this account will be excluded from the synchronization of the "Recent" addresses | ||||||||||||||||||||||||||||||||||||||
| Activate calendar | Activate calendar | ||||||||||||||||||||||||||||||||||||||
| Calendar synchronization can be disabled | If activated , the user can disable calendar synchronization | ||||||||||||||||||||||||||||||||||||||
| Enable/disable contacts | If activated , contacts will be enabled | ||||||||||||||||||||||||||||||||||||||
| Contact synchronization can be disabled | If activated , the user can disable contact synchronization | ||||||||||||||||||||||||||||||||||||||
| Enable email | If activated , email will be enabled | ||||||||||||||||||||||||||||||||||||||
| Mail synchronization deactivatable | If activated , the user can disable mail synchronization | ||||||||||||||||||||||||||||||||||||||
| Enable notes | If activated , notes will be enabled | ||||||||||||||||||||||||||||||||||||||
| Notes synchronization deactivatable | If activated , the user can disable notes synchronization | ||||||||||||||||||||||||||||||||||||||
| Enable reminders | If activated , reminders will be enabled | ||||||||||||||||||||||||||||||||||||||
| Reminders synchronization deactivatable | If activated , the user can disable reminders synchronization | ||||||||||||||||||||||||||||||||||||||
| Overwrite previous password | If activated , the previous password can be overwritten | ||||||||||||||||||||||||||||||||||||||
| Audio calls | Enter ID | The bundle ID of the application that processes audio calls made to contacts from this account | |||||||||||||||||||||||||||||||||||||
Example: Office365 accounts
Example: Office365 accountsExample: Integration of an Office 365 account with OAuth
Configuration in the Email & Exchange Active Sync tab when adding an Exchange Account
| Caption | Value | Description |
|---|---|---|
| Account name | Account name | Name of the user to be displayed |
| Exchange ActiveSync Host | outlook.office365.com | Example for Office365 |
| Number of days in which emails from the past are synchronized | For ever | Possible values: 1 day, 3 days, 1 week, 2 weeks, 1 month, forever |
| Use SSL | Incoming email retrieval via Secure Socket Layer
notempty
Securepoint recommends to activate the option | |
| Email address | alice@ttt-point.onmicrosoft.de | Possible addresses are selectable from the dropdown menu incl. variables that take the information from the user data |
| Domain\User | alice@ttt-point.onmicrosoft.de | The previously selected e-mail address of the user |
| Password | The password for the email account on the mail server notempty
If OAuth is specified, the password field should remain blank | |
| Use OAuth | Specifies whether the connection should use OAuth for authentication.
| |
| OAuth login URL | https://login.microsoftonline.com/common/oauth2/v2.0/authorize | Login URL Here shown for Office365 accounts (example) |
| OAuth token request URL | https://login.microsoftonline.com/common/oauth2/v2.0/token | OAuth token request URL Here shown for Office365 accounts (example) |
| Payload certificate UUID: | None | If the authentication on the Exchange server is to be done with a certificate, this can be selected here. Show important notes about this option hide Klicken für dauerhafte Anzeige notempty The certificate must be added under beforehand. Detailed information on this can be found in the wiki for certificates Additionally, in the Certificates tab, the desired certificate must be added in the click box to be transferred to the device. |
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
Calendar
Calendar with user account
Calendar with user account Variables can be used as well.The values are taken from the user settings of the user to whom the respective device is assigned
| Variable name in profiles | Description | Example |  |
|---|---|---|---|
| $username$ alternative names: %device_user% %device_user_username% |
Username | jdoe | |
| $emailaddress$ alternative name: %device_email% |
Email address | jdoe@ttt-point.de | |
| $firstname$ alternative name: %device_user_firstname% |
First name | John | |
| $lastname$ alternative name: %device_user_lastname% |
Last name | Doe | |
| $name$ alternative name: %device_user_name% |
First name and surname | John Doe | |
| $variable1$ alternative name: %variable1% |
custom value | jdoe/ttt-point.local | |
| $variable2$ alternative name: %variable2% |
custom value | ||
| $variable3$ alternative name: %variable3% |
custom value | ||
| $device_name$ alternative name: %device_name% |
Only for iOS: The name assigned on the phone (see: Settings → General → Info → Name) |
Cell phone from Markus Müller | |
| $device_alias$ alternative name: %device_alias% |
Only for iOS: The alias assigned in the portal. If the alias is not assigned, the device_name is displayed. |
Tablet Storage1 | |
| Defining the values in the user administration in the portal under: or for the device alias in the device tile. To avoid input errors, different variable names are possible for compatibility reasons. A distinction between Android and iOS is no longer necessary. | |||
| User | Add account | ||
| Caption | Value | Description |  Calendar with user account
|
|---|---|---|---|
| Hostname | Hostname | Server address of the calendar | |
| Username | Username | The username for the login The entries $emailaddress$, $username$, $variable1$, $variable2$ and $variable3$ are also possible. | |
| Password | Password | Optional. The password of the user | |
| Use SSL | Enable Secure Socket Layer communication with the CalDAV server | ||
| Port | Port | Optional. The port of the server to which the connection is made. | |
| Main URL | Main URL | The URL to the user's calendar. | |
| Account description | Account description | Optional. The description of the account. | |
Add subscription
Subscribed calendar Variables can be used as well.The values are taken from the user settings of the user to whom the respective device is assigned
| Variable name in profiles | Description | Example | |
|---|---|---|---|
| $username$ alternative names: %device_user% %device_user_username% |
Username | jdoe | |
| $emailaddress$ alternative name: %device_email% |
Email address | jdoe@ttt-point.de | |
| $firstname$ alternative name: %device_user_firstname% |
First name | John | |
| $lastname$ alternative name: %device_user_lastname% |
Last name | Doe | |
| $name$ alternative name: %device_user_name% |
First name and surname | John Doe | |
| $variable1$ alternative name: %variable1% |
custom value | jdoe/ttt-point.local | |
| $variable2$ alternative name: %variable2% |
custom value | ||
| $variable3$ alternative name: %variable3% |
custom value | ||
| $device_name$ alternative name: %device_name% |
Only for iOS: The name assigned on the phone (see: Settings → General → Info → Name) |
Cell phone from Markus Müller | |
| $device_alias$ alternative name: %device_alias% |
Only for iOS: The alias assigned in the portal. If the alias is not assigned, the device_name is displayed. |
Tablet Storage1 | |
| Defining the values in the user administration in the portal under: or for the device alias in the device tile. To avoid input errors, different variable names are possible for compatibility reasons. A distinction between Android and iOS is no longer necessary. | |||
| Subscriptions | Add subscription | ||
| Caption | Value | Description |  Subscribed calendar
|
|---|---|---|---|
| Hostname | Hostname | Server address of the calendar | |
| Username | Username | The username for the login The entries $emailaddress$, $username$, $variable1$, $variable2$ and $variable3$ are also possible. | |
| Password | Password | Optional. The password of the user | |
| Use SSL | Enable Secure Socket Layer communication with the CalDAV server | ||
| Account description | Account description | Optional. The description of the account. | |
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
CardDav
Variables can be used as well.
The values are taken from the user settings of the user to whom the respective device is assigned
| Variable name in profiles | Description | Example | |
|---|---|---|---|
| $username$ alternative names: %device_user% %device_user_username% |
Username | jdoe | |
| $emailaddress$ alternative name: %device_email% |
Email address | jdoe@ttt-point.de | |
| $firstname$ alternative name: %device_user_firstname% |
First name | John | |
| $lastname$ alternative name: %device_user_lastname% |
Last name | Doe | |
| $name$ alternative name: %device_user_name% |
First name and surname | John Doe | |
| $variable1$ alternative name: %variable1% |
custom value | jdoe/ttt-point.local | |
| $variable2$ alternative name: %variable2% |
custom value | ||
| $variable3$ alternative name: %variable3% |
custom value | ||
| $device_name$ alternative name: %device_name% |
Only for iOS: The name assigned on the phone (see: Settings → General → Info → Name) |
Cell phone from Markus Müller | |
| $device_alias$ alternative name: %device_alias% |
Only for iOS: The alias assigned in the portal. If the alias is not assigned, the device_name is displayed. |
Tablet Storage1 | |
| Defining the values in the user administration in the portal under: or for the device alias in the device tile. To avoid input errors, different variable names are possible for compatibility reasons. A distinction between Android and iOS is no longer necessary. | |||
| User | Add account | ||
| Caption | Value | Description |  Include address books
|
|---|---|---|---|
| Hostname | Hostname | The CardDAV server hostname or IP address | |
| Username | Username | The CardDAV username The entries $emailaddress$, $username$, $variable1$, $variable2$ and $variable3$ are also possible. | |
| Password | Password | The CardDAV password | |
| Use SSL | When enabled , the Secure Socket Layer communicates with the CardDAV server. | ||
| Port | Port | The port number to connect to the CardDAV server | |
| Main URL | Main URL | The main URL for the CardDAV account | |
| Account description | Account description | The display name of the account (e.g. "Company CardDAV Account"). | |
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
Google account
| Caption | Value | Description |  Google Accounts menu item
|
|---|---|---|---|
| User | Add account | Adds a Google account. This also makes, for example, the history of Google searches or individual Google Maps configurations, such as special points, available on the device. | |
| Account description | Account description | The displayed name of the account (e.g. "Company Server Account"). | |
| Account name | Account name | Full user name of the Google account | |
| Email address | Email address | The address of the account (e.g. "mdm.ttt-point@gmailcom") Addresses of created users (from ) can be selected or freely entered. | |
| Audio calls | Enter ID | The bundle ID of the application that processes audio calls made to contacts from this account | |
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
Personalization
notempty
New as of: 2.21
Information that can be displayed on the login screen and lock screen.
Devices used by different people can thus display accessible information for everyone (e.g. an inventory number).
Devices used by different people
Shared device in Apple terminology
notempty
Supervised devices only.
Show variables overview
hide
Klicken für dauerhafte Anzeige
The values are taken from the user settings of the user to whom the respective device is assigned
| Variable name in profiles | Description | Example | |
|---|---|---|---|
| $username$ alternative names: %device_user% %device_user_username% |
Username | jdoe | |
| $emailaddress$ alternative name: %device_email% |
Email address | jdoe@ttt-point.de | |
| $firstname$ alternative name: %device_user_firstname% |
First name | John | |
| $lastname$ alternative name: %device_user_lastname% |
Last name | Doe | |
| $name$ alternative name: %device_user_name% |
First name and surname | John Doe | |
| $variable1$ alternative name: %variable1% |
custom value | jdoe/ttt-point.local | |
| $variable2$ alternative name: %variable2% |
custom value | ||
| $variable3$ alternative name: %variable3% |
custom value | ||
| $device_name$ alternative name: %device_name% |
Only for iOS: The name assigned on the phone (see: Settings → General → Info → Name) |
Cell phone from Markus Müller | |
| $device_alias$ alternative name: %device_alias% |
Only for iOS: The alias assigned in the portal. If the alias is not assigned, the device_name is displayed. |
Tablet Storage1 | |
| Defining the values in the user administration in the portal under: or for the device alias in the device tile. To avoid input errors, different variable names are possible for compatibility reasons. A distinction between Android and iOS is no longer necessary. | |||
| Caption | Value | Description |  |
 |
|
|---|---|---|---|---|---|
|
| |||||
| Activate configuration | After setting this, you can set the shared device configuration. Shared device configuration options allow you to specify optional text to be displayed in the login window and lock screen (i.e. a ”If lost, return to” message and Asset Tag information). It is supported on iOS 9.3 and later. | ||||
| Lock screen footnote | Enter display text | Optional. A footnote displayed on the login window and lock screen. | |||
| Asset Tag Information | Enter display text | Optional. Asset tag information for the device, displayed on the login window and lock screen. Example: This device belongs to the company TTT-Point AG. The device is called %device_name% and is managed under %device_alias%. | |||
Synchronization
| |||||
| Sync the device alias with the device name |
When enabled , the device alias configured in the portal is automatically transferred to the iOS device as the device name. | ||||
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
notempty
The profile used with these settings can only be installed on an iPad if no users have been previously registered on this iPad. The iPad must therefore be reset to the factory settings. | |||
| Caption | Value | Description |  Shared Device Konfiguration menu item
|
|---|---|---|---|
| Activate configuration | The shared device configuration can be set by activating . | ||
| Managed Apple ID default domains | Enter domains | A list of domains displayed on the login screen of the Shared iPad. When logging into the device, the user can select a domain from the list to complete their Managed Apple ID. The corresponding domain is added to their login. | |
| Online authentication grace period | 0 | ||
| Quota size | 0 | The quota size (in megabytes MB) for each user on the shared device or, if the quota size is too small, the minimum quota size. | |
| Resident users | 0 | The expected number of users. If this entered number is greater than the value for the maximum possible number of users that the device supports, the MDM server uses the maximum possible number instead. | |
| Skip language setup | When is activated, the system automatically selects the system language and regional scheme for the new Shared iPad user. | ||
| Temporary session only | If is activated, the user sees the welcome screen for guests and can only log in as a guest user. | ||
| Time limit for temporary session | 30 | The temporary session is automatically logged off after the specified period (in seconds) of inactivity. | |
| User session timeout | 30 | The user session is automatically logged off after the specified period (in seconds) of inactivity. | |
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |
| Caption | Value | Description |  Shared iPad Benutzer menu item
|
|---|---|---|---|
| Apple IDs | admin@ttt-point.de | This profile will be available on all General selected Devices for these Apple IDs. | |
| Close | Closes the tab without applying changes |
| Save | Applies the changes / new creation, saves and closes the tab |