<!--
{
  "availability" : [
    "iOS: 13.4.0 -",
    "iPadOS: 13.4.0 -",
    "macCatalyst: 27.0.0 -",
    "macOS: 27.0.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "AutomaticAssessmentConfiguration",
  "identifier" : "/documentation/AutomaticAssessmentConfiguration/AEAssessmentConfiguration/allowsOnlyParticipantsToRun",
  "metadataVersion" : "0.1.0",
  "role" : "Instance Property",
  "symbol" : {
    "kind" : "Instance Property",
    "modules" : [
      "Automatic Assessment Configuration"
    ],
    "preciseIdentifier" : "c:objc(cs)AEAssessmentConfiguration(py)allowsOnlyParticipantsToRun"
  },
  "title" : "allowsOnlyParticipantsToRun"
}
-->

# allowsOnlyParticipantsToRun

A Boolean value that indicates whether only participant applications are allowed to run during an assessment.

```
var allowsOnlyParticipantsToRun: Bool { get set }
```

## Discussion

Only validly signed participants can be permitted. The launch allowlist pins each entry to the code signing identifier and team identifier read from its signature, so an unsigned or invalidly signed participant has no identity to pin and is denied launch even though you configured it as a participant. This holds regardless of [`requiresSignatureValidation`](/documentation/AutomaticAssessmentConfiguration/AEAssessmentBinaryExecutable/requiresSignatureValidation).

> SeeAlso: ``doc://com.apple.automaticassessmentconfiguration/documentation/AutomaticAssessmentConfiguration/AEAssessmentBinaryExecutable`` for how an unenforceable executable participant affects the session.

---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)