Restricting tvOS Apps
You can use Jamf Pro to create a mobile device configuration profile that restricts certain tvOS apps and specify the Apple TV devices and users to which the profile should be applied (called "scope"). Mobile device configuration profiles are XML files (.mobileconfig) that provide an easy way to define settings and restrictions for mobile devices.
Requirements
To restrict tvOS apps, you need:
-
Jamf Pro 9.101.0 or later
-
Supervised Apple TV devices with tvOS 11 or later
-
A valid push certificate in Jamf Pro
Procedure
-
Log in to Jamf Pro.
-
Click Devices at the top-left of the page.
-
Click Configuration Profiles.
-
Click New
.
-
On the General pane, enter a name for the profile and configure other settings on the pane as needed.
-
To configure the tvOS app restrictions, click the Restrictions tab, and do the following, depending on the Jamf Pro version in your environment:
Jamf Pro 10.22.0 or later-
Click the Apps tab.
-
Select tvOS and Supervised in the filter.
-
Configure the App usage setting as needed.
Jamf Pro 10.21.0 or earlier
-
Click iOS and tvOS.
-
Click Applications.
-
Choose “Do Not Allow Some Apps” or “Only Allow Some Apps” from the Restrict App Usage (supervised only) pop-up menu.
-
Click Add
.
-
Enter the app name in the App Name field.
-
Repeat steps d through e as needed.
-
-
Click the Scope tab and configure the scope of the profile. With scope, you can add targets, limitations, and exclusions for remote management tasks.
-
On the Targets pane, choose “All Mobile Devices” or “Specific Mobile Devices” from the Target Mobile Devices pop-up menu.
-
(Optional) For Selected Deployment Targets, click Add, and then select a deployment target.
-
-
Click Done.
-
To deploy the configuration profile, click Save.
Note: If a device has two or more configuration profiles with restrictions, it will accept the most restrictive settings.