Provisioning profile missing com.apple.developer.family-controls entitlement despite approved capability

Question

Created 1d

Replies 1

Boosts 0

Participants 2

My Family Controls (Distribution) capability request (C4N7962252) was approved March 15, 2026 for bundle ID com.jedsiegel.unplugtogether. All three Family Controls capabilities are enabled on the App ID. When I generate a provisioning profile (manual or automatic), Xcode reports: "Provisioning profile doesn't match the entitlements file's value for the com.apple.developer.family-controls entitlement." I decoded the profile using security cms -D and found:

com.apple.developer.family-controls.app-and-website-usage → present com.apple.developer.family-controls → missing entirely

My entitlements file requires com.apple.developer.family-controls with value ["individual"] for AuthorizationCenter. I've tried toggling capabilities off/on, deleting and recreating profiles, switching between automatic and manual signing, and clearing provisioning profile caches. Nothing works because the profile generation itself is not including the entitlement. Team ID: Q4RA4WMD6K Xcode 26.3, targeting iOS 26.2 Has anyone encountered this? Is there a way to get the provisioning system to include this entitlement?

Boost

Answer 1

DTS Engineer OP

Apple

1d

AFAICT, based on my view of your capabilities, this additional capability was assigned to your team correctly. Specifically, the capability enables com.apple.developer.family-controls for Development, Ad hoc, and App Store distribution for these App IDs:

Q________K.c__.j________.u____________r
Q________K.c__.j________.u____________r.device-activity-monitor
Q________K.c__.j________.u____________r.shield-configuration
Q________K.c__.j________.u____________r.shield-action

Note Recently we’ve started enabling the capability for the entire team, rather than for specific App IDs, but your request was processed before that policy change.

Please run this experiment:

Navigate to Developer > Account > Identifiers.
Select one of the App IDs from the above list.
Make sure the Family Controls (Distribution) capability is enabled for on it.
Now navigate to Developer > Account > Profiles.
Click the add (+) button to start creating a new profile.
Select App Store Connect and click Continue.
Select the same App ID as in step 2 and click Continue.
Work through the rest of workflow.
At the end, download the profile.
Dump the profile using:

% security cms -D -i /path/to/profile | plutil -p -

What do you see in its entitlements allowlist?

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

0