Category filter

Configuration profile to block app bundles on Apple TV

As streaming services have become increasingly popular, the use of tvOS devices has also increased. However, allowing access to certain apps on tvOS can be a concern for administrators, especially in shared or public environments. Hence, administrators will have to limit access to certain apps that may not be appropriate for a particular environment or user group.

For example, in a workspace, administrators may want to block access to certain streaming services to prevent distraction during office hours. Admins can make use of a custom configuration profile to deploy a custom profile to allow or block app bundles on Apple TV devices. It ensures that users are only able to use apps that are appropriate for their needs and the environment in which they are being used.

Disclaimer:

The sample configuration profile provided below is adapted from third-party open-source sites.

Allow app bundle ID

Note:

This configuration profile is supported on supervised Apple TV devices running tvOS 11.0 and above.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>allowListedAppBundleIDs</key>
            <array>
                <string>com.apple.TVPhotos</string>
                <string>com.apple.TVMusic</string>
                <string>com.apple.TVMovies</string>
            </array>
            <key>PayloadIdentifier</key>
            <string>com.example.myrestrictionspayload</string>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadUUID</key>
            <string>53bec1be-ffec-4f88-acbd-b02aee8f04a9</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Restrictions</string>
    <key>PayloadIdentifier</key>
    <string>com.example.myprofile</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>6020206c-12c2-4ada-987a-dd4c560ca73a</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>PayloadContent</key>

<array>

<dict>

<key>allowListedAppBundleIDs</key>

<array>

<string>com.apple.TVPhotos</string>

<string>com.apple.TVMusic</string>

<string>com.apple.TVMovies</string>

</array>

<key>PayloadIdentifier</key>

<string>com.example.myrestrictionspayload</string>

<key>PayloadType</key>

<string>com.apple.applicationaccess</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</array>

<key>PayloadDisplayName</key>

<string>Restrictions</string>

<key>PayloadIdentifier</key>

<string>com.example.myprofile</string>

<key>PayloadType</key>

<string>Configuration</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</plist>

The property “allowListedAppBundleIDs” allows only bundle IDs listed in the array to be shown. Also, include the value “com.apple.webapp” to allow webclips.

Block app bundle ID

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>blockedAppBundleIDs</key>
            <array>
                <string>com.apple.TVPhotos</string>
                <string>com.apple.TVMusic</string>
                <string>com.apple.TVMovies</string>
            </array>
            <key>PayloadIdentifier</key>
            <string>com.example.myrestrictionspayload</string>
            <key>PayloadType</key>
            <string>com.apple.applicationaccess</string>
            <key>PayloadUUID</key>
            <string>53bec1be-ffec-4f88-acbd-b02aee8f04a9</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
        </dict>
    </array>
    <key>PayloadDisplayName</key>
    <string>Restrictions</string>
    <key>PayloadIdentifier</key>
    <string>com.example.myprofile</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>6020206c-12c2-4ada-987a-dd4c560ca73a</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<dict>

<key>PayloadContent</key>

<array>

<dict>

<key>blockedAppBundleIDs</key>

<array>

<string>com.apple.TVPhotos</string>

<string>com.apple.TVMusic</string>

<string>com.apple.TVMovies</string>

</array>

<key>PayloadIdentifier</key>

<string>com.example.myrestrictionspayload</string>

<key>PayloadType</key>

<string>com.apple.applicationaccess</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</array>

<key>PayloadDisplayName</key>

<string>Restrictions</string>

<key>PayloadIdentifier</key>

<string>com.example.myprofile</string>

<key>PayloadType</key>

<string>Configuration</string>

<key>PayloadUUID</key>

<key>PayloadVersion</key>

</dict>

</plist>

The property “blockedAppBundleIDs” prevents bundle IDs listed in the array to be shown. Also, include the value “com.apple.webapp” to restrict webclips.

Notes:

To create and customize configuration profiles, you can use tools like Apple Configurator, Profile Manager or manually create them using text editors.
Use non-encrypted .mobileconfig, .xml, or plist files to deploy profiles across devices.
Ensure that you do not associate conflicting configurations with the devices.
Use wildcards to fetch key values from the portal.
It is recommended to manually validate the configuration profile on a system before executing it in bulk.
Hexnode will not be responsible for any damage/loss to the system on the behavior of the configuration profile.

Need more help?

Raise a Ticket

Ask Community

Chat With us