Release_iOS-18-2_macOS-15-2

mdm/commands/account.configuration.yaml

@@ -11,6 +11,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: true
       userenrollment:
         mode: forbidden

mdm/commands/application.extensions.listactive.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: QueryInstalledApps
       devicechannel: false
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/application.extensions.mappings.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: QueryInstalledApps
       devicechannel: false
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/application.install.enterprise.yaml

@@ -12,6 +12,7 @@ payload:
       accessrights: AllowAppInstallation
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/application.install.yaml

@@ -26,6 +26,7 @@ payload:
       accessrights: AllowAppInstallation
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/application.installed.list.yaml

@@ -19,6 +19,7 @@ payload:
       accessrights: AllowQueryApplications
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/application.invitetoprogram.yaml

@@ -19,6 +19,7 @@ payload:
       accessrights: None
       devicechannel: false
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/application.managed.list.yaml

@@ -22,6 +22,8 @@ payload:
       accessrights: AllowAppInstallation
       devicechannel: true
       userchannel: true
+      supervised: false
+      requiresdep: false
       userenrollment:
         mode: allowed
     tvOS:

mdm/commands/application.remove.yaml

@@ -19,6 +19,8 @@ payload:
       accessrights: AllowAppInstallation
       devicechannel: true
       userchannel: false
+      supervised: false
+      requiresdep: false
       userenrollment:
         mode: forbidden
     tvOS:

mdm/commands/certificate.list.yaml

@@ -25,6 +25,7 @@ payload:
       accessrights: AllowInspection
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/device.configured.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: true
       userenrollment:
         mode: forbidden

mdm/commands/device.erase.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: AllowDeviceErase
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/device.lock.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: AllowPasscodeRemovalAndLock
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/device.restart.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: AllowPasscodeRemovalAndLock
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/device.shutdown.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: AllowPasscodeRemovalAndLock
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/information.contentcaching.yaml

@@ -11,6 +11,7 @@ payload:
       accessrights: AllowQueryNetworkInformation
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/information.device.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: Special Case
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/information.security.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: AllowQuerySecurity
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed
@@ -69,8 +70,8 @@ responsekeys:
         userenrollment:
           mode: forbidden
     type: <boolean>
-    content: If 'true', the device has a passcode. This value is available in iOS
-      4 and later, and tvOS 6 and later.
+    content: If 'true', the device has a passcode. This key doesn't apply to User-Enrolled
+      devices. This value is available in iOS 4 and later, and tvOS 6 and later.
   - key: PasscodeCompliant
     supportedOS:
       macOS:

mdm/commands/lom.devicerequest.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: DeviceLockAndRemovePasscode
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/lom.setuprequest.yaml

@@ -11,6 +11,7 @@ payload:
       accessrights: DeviceLockAndRemovePasscode
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/managed.application.configuration.yaml

@@ -23,6 +23,7 @@ payload:
       accessrights: AllowAppInstallation
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/media.install.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: AllowAppInstallation
       devicechannel: false
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/mirroring.request.yaml

@@ -19,6 +19,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/mirroring.stop.yaml

@@ -19,6 +19,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/passcode.firmware.set.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: DeviceLockAndRemovePasscode
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/passcode.firmware.verify.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/passcode.recovery.set.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: DeviceLockAndRemovePasscode
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/passcode.recovery.verify.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: DeviceLockAndRemovePasscode
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/profile.install.yaml

@@ -22,6 +22,7 @@ payload:
       accessrights: AllowInstallationRemoval
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/profile.list.yaml

@@ -21,6 +21,7 @@ payload:
       accessrights: AllowInspection
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/profile.provisioning.install.yaml

@@ -22,6 +22,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/profile.provisioning.list.yaml

@@ -22,6 +22,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/profile.provisioning.remove.yaml

@@ -21,6 +21,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/profile.remove.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: AllowInstallationRemoval
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed

mdm/commands/rotate.file.vault.key.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: DeviceLockAndRemovePasscode
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/set.auto.admin.password.yaml

@@ -11,6 +11,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: true
       userenrollment:
         mode: forbidden

mdm/commands/settings.yaml

@@ -19,6 +19,7 @@ payload:
       accessrights: AllowSettings
       devicechannel: true
       userchannel: true
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: allowed
@@ -604,6 +605,40 @@ payloadkeys:
         presence: optional
         content: A unique identifier for the various services a single organization
           manages.
+  - key: DefaultApplications
+    supportedOS:
+      iOS:
+        introduced: '18.2'
+        sharedipad:
+          mode: forbidden
+        userenrollment:
+          mode: forbidden
+      macOS:
+        introduced: n/a
+      tvOS:
+        introduced: n/a
+      visionOS:
+        introduced: '2.2'
+        userenrollment:
+          mode: forbidden
+      watchOS:
+        introduced: n/a
+    type: <dictionary>
+    presence: optional
+    content: A dictionary that contains default application bundle identifiers. Currently
+      it supports a default web browser app.
+    subkeys:
+    - key: Item
+      type: <string>
+      presence: required
+      rangelist:
+      - DefaultApplications
+      content: Sets information about default applications.
+    - key: WebBrowser
+      type: <string>
+      presence: optional
+      content: The bundle identifier of the app that will be set as the default web
+        browser. This app must be an eligible web browser in the region of the device.
   - key: MDMOptions
     supportedOS:
       iOS:
@@ -761,7 +796,8 @@ payloadkeys:
       type: <integer>
       presence: optional
       content: The quota size, in megabytes (MB), for each user on the shared device,
-        or if the quota size is too small, the minimum quota size.
+        or if the quota size is too small, the minimum quota size. Available to Temporary
+        Sessions Only guest users on iOS 17+.
     - key: ResidentUsers
       type: <integer>
       presence: optional

mdm/commands/system.update.available.yaml

@@ -20,6 +20,7 @@ payload:
       accessrights: None
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden

mdm/commands/user.unlock.yaml

@@ -10,6 +10,7 @@ payload:
       accessrights: DeviceLockAndRemovePasscode
       devicechannel: true
       userchannel: false
+      supervised: false
       requiresdep: false
       userenrollment:
         mode: forbidden