# SystemPolicyRule The payload that configures the system policy. ``` object SystemPolicyRule ``` ## Discussion Specify `com.apple.systempolicy.rule` as the payload type. This payload allows control over Gatekeeper’s system policy rules. The keys and functionality are tightly related to the `spctl` command line tool. For more information, see the manual page for `spctl`. This payload can only exist in a device profile. If the payload is present in a user profile, an error occurs during installation and the profile installation fails. ### Profile availability ||| |--------------------------|-----| |Device channel |macOS| |User channel |N/A | |Allow manual install |macOS| |Requires supervision |N/A | |Requires user-approved MDM|N/A | |Allowed in user enrollment|N/A | |Allow multiple payloads |macOS| ### Profile example ```plist PayloadContent Priority 101 Requirement anchor apple generic and identifier "com.example.myapp" and (certificate leaf[field.9.8.765.432109.876.5.4.3] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.9.8.765.432109.876.5.4.3] /* exists */ and certificate leaf[subject.OU] = "ABCDE12345") PayloadIdentifier com.example.mysystempolicyrulepayload PayloadType com.apple.systempolicy.rule PayloadUUID 624b5152-a1cd-4bac-baa3-51fbb1f04973 PayloadVersion 1 PayloadDisplayName System Policy Rule PayloadIdentifier com.example.myprofile PayloadType Configuration PayloadUUID 7fa54f02-e6e1-4042-bb75-a2a4d962ac6d PayloadVersion 1 ``` --- Copyright © 2026 Apple Inc. All rights reserved. | [Terms of Use](https://www.apple.com/legal/internet-services/terms/site.html) | [Privacy Policy](https://www.apple.com/privacy/privacy-policy)