Configuration profiles

Configuration profiles streamline the macOS computer, iPad and iPhone configuration process. Use configuration profiles to deploy settings and authorization information onto Apple devices.

Configuration profiles have a .mobileconfig extension and are XML files containing payloads. Payloads manage specific settings on Apple devices. A configuration profile can contain more than one payload and an Apple device can have more than one configuration profile. 

Using configuration profiles, you can apply and control a wide variety of settings, including:

  • Configuring the device's network settings.
  • Applying default Microsoft Office configuration.
  • Ensuring the user complies with company policy by restricting access to specific tasks.

For more information about the functions available through configuration profiles, see the Apple Configuration Profile Reference guide and Microsoft Mac preferences.

Apple supervision (configured through Apple Business Manager, Apple School Manager, or Configurator 2) is designed for company owned devices and provides greater control over the restrictions available through payloads.

Payload keys marked as "Supervised only" under "Value" in the Apple or other vendor's tool documentation are only applied on devices that are under Apple supervision, they are ignored on unsupervised devices.

If the payload key "Value" does not include the "Supervised only" reference, then the key is supported on both supervised and unsupervised devices.

For more information, see Apple device supervision.

Device Management for Apple lets you deploy custom profiles, but we don’t manage or validate them. We’re not liable for system, hardware, or data loss. Customers or profile developers must confirm the integrity and impact of any custom profiles.

Next steps

Related articles

Updated: Dec 11, 2025