App restrictions configuration setting

5 min

The App Restrictions configuration setting allows you to whitelist or blacklist managed apps in the App Catalog on Ivanti EPMM. Creating a whitelist restricts device users to viewing on their devices only apps explicitly listed in the whitelist. Creating a blacklist restricts device users from viewing or launching blacklisted apps on their devices. You can also blacklist apps from the Apple App Store.

You can create more than one whitelist or blacklist, but Ivanti EPMM will only send one app restriction setting to devices. There is no default app restrictions configuration. If you configure both a blacklist and a whitelist, then Ivanti EPMM removes all blacklisted apps from the whitelist, and sends only the whitelist to devices. If you apply one or more App Restriction configurations to a label, then Ivanti EPMM combines all App Restriction configurations and sends it to the devices belonging to that label.

After you have created a blacklist, you cannot convert it to a whitelist.

This feature applies only to supervised devices running iOS 9.3 or supported newer versions.

This setting applies to tvOS 11.0+ or supported newer versions.

Whitelisting managed iOS apps

Creating a whitelist of managed apps allows you to specify the apps you want to be visible to device users on their devices. You can whitelist apps from the App Catalog in Ivanti EPMM. Ivanti EPMM hides from the device user any app that is not whitelisted.

This feature applies only to supervised devices running iOS 9.3 or supported newer versions. You cannot whitelist a web clip. This is an Apple limitation.

Procedure

Select Policies & Configs > Configurations.

Select Add New.

Select Apple > iOS / tvOS > App Restrictions. The New App Restrictions Configurations dialog box opens.

In the Name field, enter a name for the app restriction configuration. Optionally, enter a description for the app restriction configuration in the Description field.

Under App Restrictions, select Create a Whitelist.

Select Add > App Catalog. A new row is added to the table of apps.

In the table, select the cell in the App Name column, and begin typing the app name you want to blacklist. A drop-down list of App Catalog apps appears.

From the drop-down list, select the App Catalog app you want to blacklist.

Repeat steps 6-8 for any additional apps you would like to whitelist.

Select Save.

Select the app restrictions configuration you created.

Select Actions > Apply to Label.

Select the labels to which you want to apply the provisioning profile, such as iOS.

Select Apply. Once you have applied the label, the App Restrictions configuration is automatically pushed to the devices.

Blacklisting iOS apps

Creating a blacklist allows you to specify particular apps you want to prevent device users from viewing or running.

You can select apps to blacklist in the following ways:

From an Apple App Store: You can blacklist a public app from a particular Apple App Store by first choosing the Apple App Store and then searching for the app.

From the App Catalog: You can blacklist a particular managed app from the App Catalog on Ivanti EPMM.

Manually: You can blacklist a particular app by manually entering its name or bundle ID.

This feature applies only to supervised devices running iOS 9.3 or supported newer versions.

Procedure

Select Policies & Configs > Configurations.

Select Add New.

Select Apple > iOS / tvOS > App Restrictions. The New App Restrictions Configurations dialog box opens.

In the Name field, enter a name for the app restriction configuration. Optionally, enter a description for the app restriction configuration in the Description field.

Under App Restrictions, select Create a Blacklist.

To blacklist an app from the Apple App Store:

Select Add > iTunes Store to select the particular Apple App Store where the app can be found. A row is added to the table of apps.

In the App Name column, search for the app in the App Store by entering the app name.

From the drop-down list that appears, select the relevant app.

To blacklist an app from the App Catalog on Ivanti EPMM:

Select Add > App Catalog. A row is added to the table of apps.

In the table, select the cell in the App Name column, and begin typing the app name you want to blacklist.

From the drop-down list that appears, select the App Catalog app you want to blacklist.

To blacklist an app manually:

Select Add > Enter Bundle ID. A row is added to the table of apps.

In the table, select the cell in the App Name column and enter the name of the app you want to blacklist.

Alternatively, select the cell in the Bundle ID column, and enter the bundle ID of the app you want to blacklist.

For any other apps you want to blacklist, repeat steps 6, 7 or 8.

Select Save.

Select the app restrictions configuration you created.

Select Actions > Apply to Label.

Select the labels to which you want to apply the provisioning profile, such as iOS.

Select Apply. Once you have applied the label, the App Restrictions configuration is automatically pushed to the devices.