There are a lot of payloads that MDM and profiles can manage in iOS. Restrictions are probably the one I get the most questions about. And most are pretty self-explanatory. Sooooo, rather than open Profile Manager every time I need to see the list, here it is:
- Allow use of Camera
- Allow FaceTime
- Allow screenshots and screen recording
- Allow AirDrop (supervised only)
- Allow iMessage (supervised only)
- Allow voice dialing while device is locked
- Allow Siri
- Allow Siri while device is locked
- Enable Siri profanity filter (supervised only)
- Allow user-generated content in Siri (supervised only)
- Allow iBooks Store (supervised only)
- Allow installing apps using Apple Configurator and iTunes
- Allow installing apps using App Store (supervised only)
- Allow automatic app downloads (supervised only)
- Allow removing apps (supervised only)
- Allow in-app purchase
- Require iTunes Store password for all purchases
- Allow iCloud backup
- Allow iCloud documents & data
- Allow iCloud Keychain
- Allow managed apps to store data in iCloud
- Allow backup of enterprise books
- Allow notes and highlights sync for enterprise books
- Allow iCloud Photo Sharing
- Allow My Photo Stream (disallowing can cause data loss)
- Allow automatic sync while roaming
- Force encrypted backups
- Force limited ad tracking
- Allow Erase All Content and Settings (supervised only)
- Allow users to accept untrusted TLS certificates
- Allow automatic updates to certificate trust settings
- Allow trusting new enterprise app authors
- Allow installing configuration profiles (supervised only)
- Allow modifying account settings (supervised only)
- Allow modifying device name (supervised only)
- Allow modifying Find My Friends settings (supervised only)
- Allow modifying passcode (supervised only)
- Allow modifying Touch ID fingerprints (supervised only)
- Allow modifying restrictions (supervised only)
- Allow modifying Wallpaper (supervised only)
- Allow pairing with non-Configurator hosts (supervised only)
- Allow documents from managed sources in unmanaged destinations
- Allow documents from unmanaged sources in managed destinations
- Treat AirDrop as unmanaged destination
- Allow Handoff
- Allow Spotlight Suggestions
- Allow Touch ID to unlock device
- Force Apple Watch wrist detection
- Allow pairing with Apple Watch (supervised only)
- Require passcode on first AirPlay pairing
- Allow predictive keyboard (supervised only)
- Allow keyboard shortcuts
- Allow auto correction (supervised only)
- Allow spell check (supervised only)
- Allow Define (supervised only)
- Allow Wallet notifications in Lock screen
- Show Control Center in Lock screen
- Show Today view in Lock screen