The App Restrictions settings page lets you configure a setting that lets you control which public apps can be installed on devices.

What can you do with the Workspace ONE App Restrictions page?

With the App Restrictions page, you can
  • Restrict devices to only install assigned public apps from the iTunes App Store.
  • Configure a setting that lets you control which public apps can be installed on devices.

Determine your Organization group hierarchy

Before you review and modify the settings, understand the two types of inheritance/override options for the organization group hierarchy available at the top and bottom of the settings page and determine your choice. For more information about these settings, see Override Versus Inherit Setting for Organization Groups.

  • Current Setting - Select whether to Inherit or Override the displayed settings. Inherit means use the settings of the current organization group's parent OG, while Override enables the settings for editing so you can modify the current OG's settings directly.
  • Child Permission - Select the available behavior of child organization groups that exist below the currently selected organization group. Inherit only means child OGs are only allowed to inherit these settings. Override only means they override the settings, and Inherit or Override means you can choose to inherit or override settings in child OGs that exist below the currently selected OG.
Table 1. Settings and Policies
Setting Description
Restricted Mode for Public iOS Applications Enable this setting to restrict devices to only install assigned public apps from the iTunes App Store. This setting will send a restriction profile that blocks iTunes App Store access on iOS devices in the organization group so you do not have to configure any additional restriction profiles to block app store access.
  • Child Permission – Select the available behavior of child organization groups that exist below the currently selected organization group. Inherit only means child OGs are only allowed to inherit these settings. Override only means they override the settings, and Inherit or Override means you can choose to inherit or override settings in child OGs that exist below the currently selected OG.