Creating Managed Configurations for Apps

Jamf School Documentation
Solution
Application
Content Type
Technical Documentation
Utilities & Services
ft:locale
en-US

You can use Jamf School to configure settings for a managed app before distributing it to devices.

Note:

  • On mobile devices, managed app configurations are stored in a location that is not available to end users. To verify that a managed app configuration has recently been distributed to a mobile device, navigate to the device details page, click Activity Log in the list on the left side of the pane, and locate the following activity log entry: "Change Settings (Set config for [App bundle])".

  • On computers, managed app configurations are stored in the /Library/Managed Preferences folder.

  • For macOS apps, Jamf recommends using a custom profile to configure app settings instead of using managed app configurations. For more information on custom profiles, see Device Profiles.

Requirements

Before creating a managed app configuration, Jamf recommends that you know how to create property lists. For more information on property lists, see this documentation from the Apple Developer website.

  1. In Jamf School, navigate to Apps > Inventory in the sidebar.
  2. Click the app you want to create the managed configuration for.
  3. In the Options section, click Show advanced options.
  4. Select the Apply Managed Configuration checkbox.
  5. In the Managed Configuration section, enter a name for the managed configuration in the new XML field and enter the configuration property override values in the text box. To find these values, check with the app developer to see if the app allows managed configurations.
    Example:
    The following managed app configuration example demonstrates how to restrict Incognito mode for Google Chrome:
    <plist>
    <dict>
        <key>IncognitoModeAvailability</key>
        <integer>1</integer>
    </dict>
</plist>
    If you are using Chrome Enterprise Core to manage Google Chrome, configure the policies to apply to Google Chrome in Chrome Enterprise Core and use the following managed app configuration to define your enrollment token value:
    <plist>
    <dict>
        <key>CloudManagementEnrollmentToken</key>
        <string>tokenvalue</string>
    </dict>
</plist>
    For a complete list of Chrome policies, see Google's Chrome Enterprise policy list.
  6. If you want to add another managed configuration, click Add new and repeat steps 4 and 5.
  7. Select the device group you want to deploy the managed configuration to:
    Note:

    If a device is included in multiple device groups that the app is scoped to, it will use the managed configuration of the device group that was initially selected. If the app is scoped by Jamf Teacher, it will use the default managed configuration. If there is no default managed configuration, it will not use a managed configuration.

    • If you are deploying the managed configuration to a single device group, click the Settings icon on the group, then choose the managed configuration.

    • If you are deploying the managed configuration to multiple device groups, click the global Settings icon located in the bottom-right corner, then choose Change managed configuration to: [Name of managed configuration].

    • If the device group you want to deploy the managed configuration to is not displayed, click the + icon and choose the group from the pop-up menu. Then click the Settings icon on the group and choose the managed configuration.

  8. Click Save.
The managed configuration is deployed to the set device groups.