---
title: AppToAppLayerVPNMapping.AppLayerVPNMappingItem
framework: devicemanagement
role: symbol
role_heading: Device Management Profile
path: devicemanagement/apptoapplayervpnmapping/applayervpnmappingitem
---

# AppToAppLayerVPNMapping.AppLayerVPNMappingItem

A dictionary defining a per-app VPN relationship.

## Declaration

```data
object AppToAppLayerVPNMapping.AppLayerVPNMappingItem
```

## Properties

DesignatedRequirement: The code signature designated requirement of the app using the per-app VPN. Available: macOS 10.10+ Identifier: The bundle identifier of the app using the per-app VPN. MatchTools: An array of dictionaries. Each dictionary specifies a per-app VPN rule. Use this property to restrict this per-app VPN rule to only match the app’s spawned helper tool network traffic. For example, to match network traffic that the curl command generates when run from the Terminal.app, create an app mapping payload for Terminal.app and set the payload’s MatchTools key to an array that contains a dictionary that matches the curl command-line tool. If you don’t specify the MatchTools key, this per-app VPN rule matches all network traffic that the matching app and its spawned helper tools generate. Available: macOS 10.15.4+ Path: The file-system path of the executable using the per-app VPN. Available: macOS 10.15+ SigningIdentifier: The code signature signing identifier of the app using the per-app VPN. Available: macOS 10.10+ VPNUUID: The identifier of the per-app VPN payload, which defines the per-app VPN that the app uses. See the VPNUUID key of the AppLayerVPN payload.

## Topics

### Objects

- [AppToAppLayerVPNMapping.AppLayerVPNMappingItem.MatchToolsItem](devicemanagement/apptoapplayervpnmapping/applayervpnmappingitem/matchtoolsitem.md)