<!--
{
  "availability" : [
    "iOS: 17.2.0 -",
    "iPadOS: 17.2.0 -",
    "macCatalyst: 17.2.0 -",
    "macOS: 26.0.0 -",
    "visionOS: 2.4.0 -"
  ],
  "documentType" : "symbol",
  "framework" : "DeviceManagement",
  "identifier" : "/documentation/DeviceManagement/AppManaged",
  "metadataVersion" : "0.1.0",
  "role" : "Object",
  "symbol" : {
    "kind" : "Object",
    "modules" : [
      "Device Management"
    ],
    "preciseIdentifier" : "rmdm-declarations:AppManaged"
  },
  "title" : "AppManaged"
}
-->

# AppManaged

The declaration to configure a managed app.

```
object AppManaged
```

## Discussion

Specify `com.apple.configuration.app.managed` as the declaration type.

### Configuration availability

|||
|--------------------------------|----------------------------------------------|
|Allowed in supervised enrollment|iOS, macOS, Shared iPad, visionOS             |
|Allowed in device enrollment    |iOS, Shared iPad, visionOS                    |
|Allowed in user enrollment      |iOS, macOS, Shared iPad, visionOS             |
|Allowed in local enrollment     |N/A                                           |
|Allowed in system scope         |iOS, macOS, Shared iPad, visionOS             |
|Allowed in user scope           |macOS                                         |
|Apply                           |Multiple configurations are applied separately|

### Configuration examples

**App Store:**

This configuration installs an App Store app with `Required` install behavior and a device license.

```json
{
    "Type": "com.apple.configuration.app.managed",
    "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",
    "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",
    "Payload": {
        "AppStoreID": "361285480",
        "InstallBehavior": {
            "Install": "Required",
            "License": {
                "Assignment": "Device"
            }
        }
    }
}
```

**Enterprise:**

This configuration installs an enterprise app with app attributes, cellular downloads disallowed, and an update policy.

```json
{
    "Type": "com.apple.configuration.app.managed",
    "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",
    "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",
    "Payload": {
        "ManifestURL": "https://example.com/apps/TestApp.plist",
        "InstallBehavior": {
            "Install": "Required",
            "AllowDownloadsOverCellular": "AlwaysOff"
        },
        "UpdateBehavior": {
            "AutomaticAppUpdates": "AlwaysOn"
        },
        "Attributes": {
            "AssociatedDomains": [
                "www.example.com"
            ],
            "AssociatedDomainsEnableDirectDownloads": true,
            "CellularSliceUUID": "Cellular-12345",
            "ContentFilterUUID": "ContentFilter-12345",
            "DNSProxyUUID": "DNSProxy-12345",
            "Hideable": false,
            "Lockable": false,
            "RelayUUID": "Relay-12345",
            "TapToPayScreenLock": true,
            "VPNUUID": "VPN-12345"
        }
    }
}
```

**Packaged:**

This configuration manages an app installed by a package using a composed identifier to identify the app.

```json
{
    "Type": "com.apple.configuration.app.managed",
    "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",
    "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",
    "Payload": {
        "AppComposedIdentifier": "com.example.TestApp (ABCDE12345)",
        "InstallBehavior": {
            "Install": "Required"
        }
    }
}
```

**Configuration:**

This configuration installs an enterprise app with declarative app configuration for the app and an extension.

```json
{
    "Type": "com.apple.configuration.app.managed",
    "Identifier": "EB13EE2B-5D63-4EBA-810F-5B81D07F5017",
    "ServerToken": "E180CA9A-F089-4FA3-BBDF-94CC159C4AE8",
    "Payload": {
        "ManifestURL": "https://example.com/apps/TestApp.plist",
        "InstallBehavior": {
            "Install": "Required",
            "AllowDownloadsOverCellular": "AlwaysOff"
        },
        "UpdateBehavior": {
            "AutomaticAppUpdates": "AlwaysOn"
        },
        "AppConfig": {
            "DataAssetReference": "52C7D562-1DEC-472A-BFDF-3A8BE630385B",
            "Certificates": [
                {
                    "Identifier": "Certificate1",
                    "AssetReference": "84965BAD-11B2-48CE-9766-CE32387C508E"
                }
            ]
        },
        "ExtensionConfigs": {
            "com.example.TestApp.extension1 (ABCDE12345)": {
                "DataAssetReference": "52C7D562-1DEC-472A-BFDF-3A8BE630385B",
                "Certificates": [
                    {
                        "Identifier": "Certificate1",
                        "AssetReference": "84965BAD-11B2-48CE-9766-CE32387C508E"
                    },
                    {
                        "Identifier": "Certificate2",
                        "AssetReference": "4CEF7D59-CDB5-477A-B51B-6A1E8A63D678"
                    }
                ]
            }
        }
    }
}
```

## Topics

### Objects

[`AppManagedAppConfigDictionaryObject`](/documentation/DeviceManagement/AppManagedAppConfigDictionaryObject)

A dictionary of app config data and credentials.

[`AppManagedAttributesObject`](/documentation/DeviceManagement/AppManagedAttributesObject)

A dictionary of values to associate with the app.

[`AppManagedExtensionConfigsObject`](/documentation/DeviceManagement/AppManagedExtensionConfigsObject)

A dictionary of extension config data and credentials.

[`AppManagedInstallBehaviorObject`](/documentation/DeviceManagement/AppManagedInstallBehaviorObject)

A dictionary that describes how and when to install the app.

[`AppManagedUpdateBehaviorObject`](/documentation/DeviceManagement/AppManagedUpdateBehaviorObject)

A dictionary that specifies how the device updates apps.


---

Copyright &copy; 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)