iOS Apps Policies

App Policies allow admin to control the lifecycle and data security of applications distributed via MDM. These policies are essential for protecting corporate data, especially during device deprovision or MDM migration.

App Policies Configuration

You can configure the following policies for both App Store and Enterprise apps distributed through MDM.

1. On the MDM Console navigate to Device Mgmt->App Repository.
2. On the desired app, click on the ellipsis icon present under the Action column and select Modify Details.
   
3. Click on the App Policies and Check the desired options:
   • Remove App on MDM Profile Removal: When this option is enabled, all the apps distributed via MDM will be automatically removed from the device, when the MDM profile is removed.
     Use case: Enable this for applications containing sensitive or confidential corporate data.
   • Restrict backup for app data in iTunes and iCloud: You can protect the app data by restricting users from taking backup on their iTunes and iCloud accounts.
     Use Case: Enable this for all business-critical apps to maintain control over corporate information.
   
4. Click on save.

Note: If you modify these app policies after distributing the app,
1. Devices with the latest version of the app installed on them will be automatically updated with the modified app policies.
2. Devices with the lower version of the app installed on them will not get the modified app policies updated until the devices are updated with the latest version.

Best Practices

1. Plan Policies in Advance: Configure your desired app policies before distributing apps to avoid inconsistent enforcement across your device fleet.
2. Communicate with Users: Inform users about policies that may affect them, such as data backup restrictions, to manage expectations.
3. Version Awareness: To ensure consistent policy enforcement, consider requiring devices to update to a minimum app version after a policy change.