apple_device-management/mdm/profiles/com.apple.fileproviderd.yaml

title: File Provider
description: The payload that configures file provider settings.
payload:
  payloadtype: com.apple.fileproviderd
  supportedOS:
    iOS:
      introduced: n/a
    macOS:
      introduced: '11.0'
      multiple: false
      devicechannel: true
      userchannel: true
      supervised: false
      requiresdep: false
      userapprovedmdm: true
      allowmanualinstall: false
      userenrollment:
        mode: forbidden
    tvOS:
      introduced: n/a
    visionOS:
      introduced: n/a
    watchOS:
      introduced: n/a
payloadkeys:
- key: ManagementAllowsRemoteSyncing
  supportedOS:
    macOS:
      introduced: '26.4'
      devicechannel: true
      userchannel: false
  type: <boolean>
  presence: optional
  default: true
  content: If `false`, the device prevents the File Provider extension from using
    synchronization in any app. Also, none of the other options will be evaluated.
    Synchronization will be totally disabled for any application.
- key: ManagementRemoteSyncingAllowList
  supportedOS:
    macOS:
      introduced: '26.4'
      devicechannel: true
      userchannel: false
  type: <array>
  presence: optional
  content: An array of strings representing the composed identifiers of apps. The
    device allows the corresponding apps to use File Provider extension synchronization.
    If present, and `ManagementAllowsRemoteSyncing` is set to `true`, the device allows
    only the apps in this list to use synchronization. This key is ignored if `ManagementAllowsRemoteSyncing`
    is set to `false`. If present, the other options will only be evaluated for the
    apps in this list. The format of the app identifiers is "Bundle-ID (Team-ID)",
    for example `com.example.app (ABCD1234)`.
  subkeys:
  - key: AllowListItem
    type: <string>
    presence: required
    content: A composed app identifier. The format is "Bundle.Identifier (TeamIdentifier)".
- key: AllowManagedFileProvidersToRequestAttribution
  type: <boolean>
  presence: optional
  default: false
  content: If `true`, enables file providers access to the path of the requesting
    process.
- key: ManagementAllowsKnownFolderSyncing
  supportedOS:
    macOS:
      introduced: '15.2'
      devicechannel: true
      userchannel: false
  type: <boolean>
  presence: optional
  default: true
  content: If `false`, the device prevents the File Provider extension from using
    desktop and documents synchronization in any app. This doesn't impact the ability
    for apps to utilize the File Provider extension for file and folder syncing with
    remote storage.
- key: ManagementKnownFolderSyncingAllowList
  supportedOS:
    macOS:
      introduced: '15.2'
      devicechannel: true
      userchannel: false
  type: <array>
  presence: optional
  content: An array of strings representing the composed identifiers of apps. The
    device allows the corresponding apps to use File Provider extension desktop and
    documents synchronization. If present, and `ManagementAllowsKnownFolderSyncing`
    is set to `true`, the device allows only the apps in this list to use desktop
    and documents synchronization. This key is ignored if `ManagementAllowsKnownFolderSyncing`
    is set to `false`. This setting doesn't impact the ability for apps to use File
    Provider extension volume access. The format of the app identifiers is "Bundle-ID
    (Team-ID)", for example `com.example.app (ABCD1234)`.
  subkeys:
  - key: AllowListItem
    type: <string>
    presence: required
    content: A composed app identifier. The format is "Bundle.Identifier (TeamIdentifier)".
- key: ManagementAllowsExternalVolumeSyncing
  supportedOS:
    macOS:
      introduced: '26.4'
      devicechannel: true
      userchannel: false
  type: <boolean>
  presence: optional
  default: true
  content: If `false`, the device only allows File Provider extension volume synchronization
    for the system "home" volume and any data separated volume, and prevents synchronization
    with any other volumes. If `true``, the device allows File Provider extension
    volume synchronization for the system "home" volume, any data separated volume,
    and any encrypted APFS volumes (on either internal or external media).
- key: ManagementExternalVolumeSyncingAllowList
  supportedOS:
    macOS:
      introduced: '26.4'
      devicechannel: true
      userchannel: false
  type: <array>
  presence: optional
  content: An array of strings representing the composed identifiers of apps. The
    device allows the corresponding apps to use File Provider extension volume synchronization.
    If present, and `ManagementAllowsExternalVolumeSyncing` is set to `true`, the
    device allows only the apps in this list to use volume synchronization. This key
    is ignored if `ManagementAllowsExternalVolumeSyncing` is set to `false`. The format
    of the app identifiers is "Bundle-ID (Team-ID)", for example `com.example.app
    (ABCD1234)`.
  subkeys:
  - key: AllowListItem
    type: <string>
    presence: required
    content: A composed app identifier. The format is "Bundle.Identifier (TeamIdentifier)".
- key: ManagementDomainAutoEnablementList
  supportedOS:
    macOS:
      introduced: '26.4'
      devicechannel: true
      userchannel: false
  type: <array>
  presence: optional
  content: An array of strings representing the composed identifiers of apps. The
    device automatically enables the File Provider domains for the corresponding apps.
    The device doesn't enable existing domains if enrollment happens after they are
    created. The device doesn't prevent the user from disabling these File Provider
    domains. Users need to manually enable File Provider domains in the Finder if
    their corresponding apps aren't listed here. The format of the app identifiers
    is "Bundle-ID (Team-ID)", for example `com.example.app (ABCD1234)`.
  subkeys:
  - key: AllowListItem
    type: <string>
    presence: required
    content: A composed app identifier. The format is "Bundle.Identifier (TeamIdentifier)".
examples:
- title: Profile example
  files:
  - file: examples/mdm/profiles/com.apple.fileproviderd/example1.plist