Feature Control (iOS)

For security-conscious organizations where privacy and information security concerns require controlling mobile data and other features, SOTI MobiControl provides diverse on-device restrictions. These include blocking certain device communications, similar to firewalls and more. You can configure feature control when:

You may also selectively turn off device features with the Feature Control profile configuration. Applying the configuration at the individual or group level creates custom profiles for different users and locations in an organization. For example, turning Bluetooth and infrared ports on or off determines if device users can beam business cards, applications, or documents to one another.

Tip: Use the Filter Categories search bar to search for a specific feature.

Device Functionality

Table 1. Accessibility
Feature Description
Allow Voice Dialing Users can dial their phones using voice commands.
Allow Dictation Input Users can use dictation when using the device's keyboard. (Requires supervision and iOS 10.3 or later)
Allow Continuous Path Keyboard Users can use Continuous Path keyboards. (Requires supervision and iOS 13 or later)
Allow Predictive Keyboard Users can use predictive keyboards. (Requires supervision and iOS 8.1.3 or later)
Allow Keyboard Shortcuts Users can use keyboard shortcuts. (Requires supervision and iOS 9 or later)
Allow Auto Correction Users can use keyboard auto correction. (Requires supervision and iOS 8.1.3 or later)
Allow Spell Check Users can use keyboard spell-check. (Requires supervision and iOS 8.1.3 or later)
Allow Define Lookup Users can use definition lookup. (Requires supervision and iOS 8.1.3 or later)
Allow Screen Capture Controls the ability of applications to capture the device screen.
Table 2. Apple Watch
Feature Description
Allow Apple Watch Pairing Users can pair their devices with an Apple Watch. Any currently paired Apple Watch unpairs and erases. (Requires supervision and iOS 9 or later)
Force Apple Watch Wrist Detection A paired Apple Watch must use Wrist Detection. (Requires iOS 8.2 or later)
Table 3. Classroom
Feature Description
Allow Remote View by Classroom App The Classroom app can use remote screen observation. (Requires supervision and iOS 9.3 or later)
Automatically Join Classes in Classroom The teacher can let enrolled students join classes without prompting. (Requires supervision and iOS 11 or later)
Require Permission to Leave Classes in Classroom Students enrolled in an unmanaged course via Classroom must request permission from the teacher before leaving the course. (Requires supervision and iOS 11.3 or later)
Bypass App and Device Lock Prompt in Classroom The teacher can lock apps or an enrolled student's device without prompting. (Requires supervision and iOS 11 or later)
Bypass Remote View Prompt in Classroom The teacher can remotely view an enrolled student's device without prompting. (Requires supervision and iOS 11 or later)
Note: This requires the ScreenObservationPermissionModificationAllowed to be true in the Education configuration profile.
Table 4. Data Sharing
Feature Description
Allow Managed to Unmanaged Data Sharing Managed apps can share data with unmanaged apps. (Requires iOS 7 or later)
Allow Unmanaged to Managed Data Sharing Unmanaged apps can share data with managed apps. (Requires iOS 7 or later)
Manage Copy and Paste Functionality The copy and paste functionality respects the configurations set for Allow Managed to Unmanaged Data Sharing and Allow Unmanaged to Managed Data Sharing
Allow Submission of Diagnostic and Usage Data Users can send iOS diagnostic and usage information to Apple. (Requires iOS 6 or later)
Allow Modifying Diagnostic and Usage Data Settings Users can change the option to submit diagnostic and usage information to Apple in Settings. (Requires supervision and iOS 9.3.2 or later)
Table 5. Device Setup
Feature Description
Force Date & Time to be set automatically Enables the Date & Time Set Automatically feature and prevents the user from turning it off. (Requires supervision and iOS 12 or later)
Allow Touch ID Users can use Touch ID. (Requires iOS 7 or later)
Allow Passcode Modification Users can add, change, or remove a device's passcode. (Requires supervision and iOS 9 or later)
Allow Touch ID Fingerprints Modification Users can change Touch ID fingerprints.
Allow Proximity Setup Users can use their devices to set up nearby iOS devices. (Requires supervision and iOS 11 or later)
Allow Modifying Device Name Users can change the device name. (Requires supervision and iOS 9 or later)
Allow Modifying Device Wallpaper Users can change the device wallpaper. (Requires supervision and iOS 9 or later)
Allow Modifying Notifications Settings Users can change Notification settings in Settings. (Requires supervision and iOS 9.3 or later)
Allow Apple Personalized Advertising Permits Apple personalized advertising. (Requires iOS 14 or later)
Note: If turned off, it limits Apple personalized advertising.
Table 6. iCloud
Feature Description
Allow Photo Stream Users can use the photo streaming function. (Requires iOS 5 or later)
Allow Shared Photo Stream Users can view Shared Photo Streams on their devices. (Requires iOS 6 or later)
Allow iCloud Keychain Sync Login credentials can synchronize with iOS devices associated with an iCloud account.

(Requires iOS 7.0 or later. iOS 13.0 and later require supervision.)
Allow Storing Data in iCloud for Managed Apps Users can store data from Managed Applications in iCloud. (Requires supervision and iOS 7 or later)
Allow iCloud Document Syncing Users can store documents in iCloud. (Requires iOS 5.0 or later. iOS 13.0 and later require supervision.)
Allow iCloud Device Backup The device can automatically back up its data to iCloud. (Requires iOS 5.0 or later. iOS 13.0 and later require supervision.)
Allow iCloud Photo Library Users can use iCloud Photo Library. (Requires iOS 9 or later)

Allow iCloud Private Relay

 If disabled, disables iCloud Private Relay. (Requires supervision and iOS 15 or later)
Table 7. Lock Screen
Feature Description
Allow Wallet Notifications While Locked Users can see Wallet notifications on the lock screen. (Requires iOS 6 or later)
Show Control Centre in Lock Screen Users can access the Control Centre while on the Lock Screen. (Requires supervision and iOS 7 or later)
Show Notification Centre in Lock Screen Users can access the Notification Centre while on the Lock Screen. (Requires supervision and iOS 7 or later)
Show Today View in Lock Screen Users can access the Today View while on the Lock Screen. (Requires supervision and iOS 7 or later)
Allow Auto Unlock When turned off, the device prevents auto unlocking with a paired unlocked Apple Watch. (Requires supervision and iOS 14.5 or later)
Table 8. Network and Cellular
Feature Description
Allow App Cellular Data Usage Modifications Users can change settings for app cellular data usage. (Requires supervision and iOS 7 or later)
Allow Automatic Sync While Roaming

Devices can sync automatically while roaming.

Note: If turned off, roaming devices sync only when the user accesses an account.
Allow Internet Search Results in Search Devices can show search result contents from Siri Suggestions. (Requires supervision and iOS 8 or later)Movies
Allow Creation of VPN Configurations Users can create VPN configurations. (Requires supervision and iOS 11 or later)
Allow Modifying Bluetooth Settings Users can change Bluetooth settings in Settings. (Requires supervision and iOS 10 or later)
Allow Modifying Personal Hotspot Settings Users can change Personal Hotspot settings. (Requires supervision and iOS 12.2 or later)
Allow Modifying Cellular Plan Settings Users can change their cellular plan settings. (Requires supervision and iOS 11 or later)
Allow Modifying eSIM Cellular Plans Users can add or remove a cellular plan on the device's eSIM. (Requires supervision and iOS 12.1 or later)
Allow Joining Wi-Fi Networks

The device can join Wi-Fi networks. (Requires supervision and iOS 10.3 or later)

Note: If turned off, the device can only join Wi-Fi networks from a configuration profile pushed by the MDM or carrier.
Allow Wi-Fi to be Turned Off When disabled, Wi-Fi is ON even if the device has Airplane Mode enabled. (Requires supervision and iOS 13 or later)
Table 9. Password
Feature Description
Allow Password Proximity Requests Devices can request passwords from nearby devices. (Requires supervision and iOS 12 or later)
Allow Password Sharing Users can share their passwords with the Airdrop Passwords feature. (Requires supervision and iOS 12 or later)
Allow Password AutoFill Users can use the AutoFill Passwords feature on iOS. Safari and apps prompt users to use a saved password. (Requires supervision and iOS 12 or later)
Table 10. Security and Privacy
Feature Description
Allow Handoff Users can use Handoff.
Allow Account Modifications Users can change their account in the Game Center.
Allow Host Pairing The device can pair with any host computer. (Requires supervision and iOS 7 or later)
Allow OTA (Over-the-Air) PKI Updates Devices can obtain Public Key Infrastructure (PKI) updates over the air. (Requires supervision and iOS 7 or later)
Limit Ad Tracking Prevents apps from using the Advertising Identifier. (Requires supervision and iOS 7 or later)
Allow Erase All Content and Settings Users can use the Erase All Content and Settings option in Reset UI. (Requires supervision and iOS 7 or later)
Force Encrypted Backups Managed devices encrypt their iOS backup. Newly enrolled iOS devices require a password for a backup at the next sync.
Note: Do not use this option with supervised devices.
Automatically Reject Untrusted TLS Certificates There are no prompts to trust unverifiable certificates. This setting applies to Safari, Mail, Contacts, and Calendar accounts.
Allow Interactive Configuration Profile Installation Users can install configuration profiles and certificates manually. (Requires supervision and iOS 6 or later)
Allow Modifying Restrictions Users can turn on Enable Restrictions in the Restrictions UI in Settings. (Requires supervision.)
Allow USB Restricted Mode When the device locks, it restricts connections to USB accessories. (Requires supervision and iOS 11.4.1 or later)

Allow Mail Privacy Protection

 Enables users to hide their IP address from senders. Remote content is privately downloaded in the background when they receive a message instead of when they view it. (Requires iOS 15.2 or later)

Allow Rapid Security Response Removal

 If disabled, prevents Rapid Security Response Removal.

Allow Rapid Security Response Installation

 If disabled, prevents Rapid Security Response Installation.
Table 11. Siri
Feature Description
Allow Siri Users can use voice commands to control their devices. (Requires iOS 5 or later)
Show User Generated Content in Siri Siri can show user-generated content. (Requires supervision and iOS 7 or later)
Allow Siri While Device is Locked Users can access Siri on a locked device. (Requires iOS 5.1 or later)
Enable Siri Profanity Filter Creates a filter for profane language. (Requires supervision and iOS 6 or later)
Allow Siri Server Logs Siri can store server logs. (Requires supervision and iOS 12.2 or later)
Table 12. Wireless Sharing
Feature Description
Allow AirDrop Users can share files with other Apple devices using AirDrop. (Requires supervision and iOS 7 or later)
Allow AirPrint Users can print documents using AirPrint. (Requires supervision and iOS 11 or later)
Allow Keychain Storage of AirPrint Credentials Users can store the username and password for AirPrint in the keychain. (Requires supervision and iOS 11 or later)
Require TLS for AirPrint Requires trusted certificates for TLS communication when using AirPrint. (Requires supervision and iOS 11 or later)
Allow iBeacon Discovery for AirPrint Enables iBeacon discovery of AirPrint printers. (Requires supervision and iOS 11 or later)
Note: If turned off, it prevents false AirPrint Bluetooth beacons from phishing for network traffic.
Treat AirDrop as Unmanaged Classifies AirDrop as an unmanaged drop target. (Requires iOS 9 or later)
Force Passcode on First Airplay Pairing Devices receiving AirPlay requests from this device must use a pairing password. (Requires iOS 7.1 or later)

Applications

Table 13. App Usage
Feature Description
Allow Use of Camera Users can activate the Camera app from the Home Screen. Device users can take photos or videos using native or third-party apps, including FaceTime. (Requires iOS 4.0 or later. Supervised for iOS 13.0 and later)
Allow FaceTime Users can perform video conferencing, including making or receiving FaceTime video calls. (Requires iOS 4.0 or later. Supervised for iOS 13.0 and later)
Allow Apple Music Users can access Apple Music. (Requires supervision and iOS 9 or later)
Allow Apple Music Radio Users can access Apple Music Radio. (Requires supervision and iOS 9.3 or later)
Allow iMessage Users can send or receive messages through iMessage. (Requires supervision and iOS 6 or later)
Allow iBookstore Users can view and access the iBookstore through the iBooks App. (Requires supervision and iOS 6 or later)
Allow Erotica Content Users can buy books categorized as erotica from the iBookstore. (Requires supervision and iOS 6 or later)
Allow iTunes Music Store Users can access iTunes Music Store from the home screen. Device users can preview, buy, or download music, movies, TV shows, or ringtones. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Require iTunes Password for All Purchases Users must enter their Apple ID password before making any purchases from iTunes. Ignores the standard grace period between purchases. (Requires iOS 5 or later)
Allow Find My Device Users can use Find My Device in the Find My app. (Requires supervision and iOS 13 or later)
Allow Find My Friends Users can use Find My Friends in the Find My app. (Requires supervision and iOS 13 or later)
Allow Find My Friends App Modification Users can make changes within the Find My Friends app. (Requires
supervision and iOS 7.0 or later.)
Tip: In iOS 13.0 and later, the user can make changes within the Find My app.
Allow Game Center

Users can use the Game Center app. (Requires supervision and iOS 6 or later)

Note: If turned off, the Game Center app deletes from the home screen.
Allow Addition of Game Center Friends Users can add friends to Game Center. (Requires iOS 4.2.1 or later. OS 13.0 and later require supervision.)
Allow Multiplayer Gaming Users can play multiplayer games in Game Center. (Requires iOS 4.1 or later. OS 13.0 and later require supervision.)
Allow Safari Users can access Safari from the home screen. Device users can use the Safari app to browse the web or open web clips. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Allow Autofill The browser can use autofill to complete forms displayed on websites. (Requires iOS 4.0 or later. OS 13.0 and later require supervision.)
Force Fraud Warning Safari warns users about potential fraud on a site.
Allow JavaScript The browser can run JavaScript.
Prevent Pop-ups The browser cannot open pop-ups.
Accept Cookies Select whether the browser rejects all cookies, accepts all cookies, or accepts cookies from visited sites only.
Allow News Users can use the News app. (Requires supervision and iOS 9 or later)
Allow Podcast Users can use podcasts. (Requires supervision and iOS 8 or later)
Table 14. App Security and Privacy
Feature Description
Allow App Removal Users can remove apps from their devices. (Requires supervision.)
Allow System App Removal Users can remove system apps from the device. (Requires supervision and iOS 11 or later)
Allow Files Access to USB Drive Users can connect to any connected USB devices in the Files app. (Requires iOS 13.0 or later)
Allow Files Access to Network Drive Users can connect to any network drives in the Files app. (Requires iOS 13.0 or later)
Allow App Clips

Users can add App Clips. (Requires supervision and iOS 14 or later)

Note: If turned off, any existing App Clips delete from the device.
Delay Software and OS Update Availability By Specify the number of days between when a software or OS update becomes available and when it appears to the device user. (Requires supervision and iOS 11.3 or later)
Single App Mode Allowlist An app can lock to the device screen until conditions specified on the app are met.
Note: Administrators must configure Single App mode behavior for the app outside of SOTI MobiControl.
Note: This setting permits the single app mode but does not implement it.

Select the + button to add applications to the Single App Mode Allowlist.

Visit:
Note: The Single App Mode configuration overrides the Feature Control setting if both refer to the same device.

Media Content

Table 15. Content Restrictions
Feature Description
Movies Set the maximum rating for movies to:
  • Don't Allow Movies
  • General Audiences (G)
  • Parental Guidance Suggested (PG)
  • Parents Strongly Cautioned (PG-13)
  • Restricted (R)
  • No 17 and Under Admitted (NC-17)
  • Allow All Movies
TV Shows Set the maximum rating for TV shows to:
  • Don't Allow TV Shows
  • All Children (TV-Y)
  • Older Children (TV-Y7)
  • General Audience (TV-G)
  • Parental Guidance Suggested (TV-PG)
  • Parents Strongly Cautioned (TV-14)
  • Mature Audience Only (TV-MA)
  • Allow All TV Shows
Apps Set the maximum rating for apps to:
  • Don't Allow Apps
    Important: All App Store applications remove from the device. The user can still view the App Store's content but cannot download or install applications. All Enterprise Apps remain available to the user.
  • 4+
  • 9+
  • 12+
  • 17+
  • Allow All Apps
Allow Explicit Music & Podcasts Users can download music or podcasts containing explicit content.