Adding Granular Control for Manual Profiles

5 min

The feature restricts end users from manually adding VPN profiles when an MDM administrator has already pushed a profile. When the Add connection option is hidden, users can delete the Manual profiles.

This feature also allows administrators to delete manually added VPN profiles from end user devices.

Ivanti recommends prompting the end users about deleting the profiles.

This feature is enabled using the hide_add_connection and delete_unmanaged_profiles key value pairs.

Key Functionalities:

When an MDM administrator has already pushed a VPN profile to a device, end users are restricted from manually adding new VPN profiles. The "Add connection" option is hidden in the user interface.

Administrators can also remotely delete any manually added VPN profiles from end user devices through the MDM console. Ivanti recommends that administrators notify or prompt end users before such profiles are deleted.

Configuration Using Key-Value Pairs:

The following key-value pairs are used to enable and control this feature:

Connection	Description	Type	Accepted Values	Configuration
hide_add_connection	When set to true, the "Add connection" option will be hidden from the VPN profile management interface, preventing end users from manually adding new VPN profiles.	Boolean	True or False	hide_add_connection: true
delete_unmanaged_profiles	When set to true, manually added VPN profiles (i.e., profiles not provisioned through the MDM) are automatically deleted from the end user device. It is recommended that administrators inform end users prior to deleting any profiles to avoid disruption.	Boolean	True or False	delete_unmanaged_profiles: true

Example:

These key-value pairs can be set within the VPN profile configuration policy in your MDM management console.

For example, to prevent manual VPN additions and delete unmanaged profiles, set both keys’ values to true:

{
"hide_add_connection": true,
"delete_unmanaged_profiles": true
}

To restrict manual addition but not automatically delete existing manual profiles, set hide_add_connection to true and delete_unmanaged_profiles to false.

Summary Table:

Key	Type	Value	Effect
hide_add_connection	Boolean	True	Hides "Add connection" option from user interface
delete_unmanaged_profiles	Boolean	True	Deletes all manually added (unmanaged) VPN profiles

By leveraging these keys, administrators have more granular control over how VPN profiles are managed on end user devices, ensuring compliance with enterprise policies and reducing the risk of misconfiguration.