Configuring Mobile Device and Role-Based Settings
The following settings are recommended for all devices using the Jamf Setup app. To deploy these configurations, create a smart device group that includes all devices with Jamf Setup installed.
Home Screen Layout Payload
Use the Home Screen Layout payload to configure a single home screen layout for all roles.
Warning: Configuring different home screen layouts for each role will cause an error during setup.
Restrictions Payload
You can use the Restrictions payload to show or hide apps depending on which role a user selects on the Setup screen. Considering the following scenarios when configuring the Restrictions payload:
-
If re-enrollment is used in your environment, configure the following:
-
Select the Clear extension attribute values on computers and mobile devices checkbox to ensure all values for extension attributes are cleared from mobile device inventory information during re-enrollment. Navigate to Settings > Global Management > Re-enrollment to enable this feature.
-
Specify which apps will display onscreen. This setting hides restricted apps (apps not specified) before installation, creating a better setup experience for end users during re-enrollment. In the Restrictions payload of a mobile device configuration profile , navigate to iOS and tvOS > Applications and click "Only Allow Some Apps" in the Restrict App Usage (supervised only) pop-up menu.
-
-
If re-enrollment is not used in your environment, you may want to specify which apps will not display on-screen. This setting hides restricted apps (specified apps) after installation. This process is easier to complete for administrators but should not be used with re-enrollment to prevent restricted apps from installing and disappearing during setup. In the Restrictions payload of a mobile device configuration profile, navigate to iOS and tvOS > Applications, and then click "Do Not Allow Some Apps" in the Restrict App Usage (supervised only) pop-up menu.
-
To preserve device settings and restrictions, the following settings in the Restrictions Payload of a mobile device configuration profile should not be allowed for devices using Jamf Setup:
-
"Allow Erase All Content and Settings"
-
"Allow modifying account settings"
-
"Allow modifying passcode"
-
"Allow modifying restrictions"
-
"Allow modifying wallpaper"
-
Related Information
For related information about restricting iOS apps, see the Restricting iOS Apps Best Practice Workflow for Jamf Pro.