---
title: AppSettingsAllowedObject
framework: devicemanagement
role: symbol
role_heading: Object
path: devicemanagement/appsettingsallowedobject
---

# AppSettingsAllowedObject

The dictionary of allowed app settings.

## Declaration

```data
object AppSettingsAllowedObject
```

## Properties

AllowedApps: If present, the device only shows or launches apps with bundle IDs in the array. Include the value com.apple.webapp to allow all webclips. This applies to App Store apps, marketplace apps, and locally installed apps (using Configurator, Xcode, and so forth). Available: iOS 27+ | iPadOS 27+ | tvOS 27+ | visionOS 27+ AllowedBinaries: If present, the device only allows binaries that match the binary identifier properties to run. A binary is matched only when all the binary identifiers match. The device always runs system critical processes. Use “codesign -dvvv <path_to_binary>” to show the information you need to generate these values. Available: macOS 27+ Allowed scopes: system AlwaysAllowManagedApps: If true, the device implicitly includes managed apps in the effective allow list when AllowedApps or AllowedBinaries is present. Available: macOS 27+ Allowed scopes: system DeniedApps: If present, the device prevents showing or launching apps with bundle IDs in the array. Include the value com.apple.webapp to restrict all webclips. This applies to App Store apps, marketplace apps, and locally installed apps (using Configurator, Xcode, and so forth). note: Denying system apps may disable other functionality. For example, denying the App Store app may prevent users from accepting the terms and conditions for the user-based Volume Purchase Program (VPP). Available: iOS 27+ | iPadOS 27+ | tvOS 27+ | visionOS 27+ DeniedBinaries: If present, the device doesn’t allow binaries that match the binary identifier properties to run. A binary is matched only when all the binary identifiers match. Available: macOS 27+ Allowed scopes: system

## Topics

### Objects

- [AppSettingsAllowed_BinaryIdentifierObject](devicemanagement/appsettingsallowed_binaryidentifierobject.md)

## See Also

### Objects

- [AppSettingsPrivacyObject](devicemanagement/appsettingsprivacyobject.md)