# NSExtensionManagement The payload that configures the extensions that the system allows or disallows to run on the device. ``` object NSExtensionManagement ``` ## Discussion Specify `com.apple.NSExtension` as the payload type. You can manage extensions by bundle identifiers in allow and deny lists, or by a deny list of extension points. You can also start with all public extensions disallowed. To do so, include `AllPublicExtensionPoints` in `DeniedExtensionPoints`. This causes the system to expand the list to include all extensions that belong to any public extension points. This expansion occurs at evaluation time. The list of extension points can change from release to release. The expanded list disallows Apple and third-party extensions, but still allows extensions that belong to system-critcial extension points to execute. ### Profile availability ||| |--------------------------|-----| |Device channel |macOS| |User channel |macOS| |Allow manual install |macOS| |Requires supervision |N/A | |Requires user-approved MDM|N/A | |Allowed in user enrollment|N/A | |Allow multiple payloads |macOS| ### Profile example ```plist PayloadContent AllowedExtensions com.apple.share.AirDrop.send DeniedExtensions com.apple.ncplugin.stocks DeniedExtensionPoints com.apple.share-services PayloadIdentifier com.example.mynsempayload PayloadType com.apple.nsextension PayloadUUID 9726bc46-1e51-466b-99e3-81b23561cf81 PayloadVersion 1 PayloadDisplayName NS Extension Management PayloadIdentifier com.example.myprofile PayloadType Configuration PayloadUUID 4cc87081-feee-46d1-b5d1-2a2fde9a8402 PayloadVersion 1 ``` --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)