# Apple policies

 Apple policies define management settings that Cerberus Enterprise applies to Apple devices via MDM. These settings are configured from the dashboard in the Apple policy editor.

## Before you start

 Apple device management requires Apple Management (APNs) to be configured. If needed, read the [Apple Management setup (APNs)](https://enterprise.cerberusapp.com/docs/books/user-manual/page/apple-management-setup-apns "Apple Management setup (APNs)") page.

## Open the Apple Policy Editor

 In the dashboard, open **Policies** and click **Create new Apple policy**. To edit an existing Apple policy, click its row in the policies table.

## Editor layout

 The Apple Policy Editor is organized as a set of expandable sections. At the top of the page you can always edit:

- **Name** (required)
- **Id** (read-only)
- **Description** (optional)

## Policy sections

 The sections below match the panels currently available in the Apple Policy Editor:

- **App management**: configure app-related restrictions and managed apps.
- **Passcode settings**: configure passcode requirements and related rules.
- **Security**: control features such as Auto Unlock and biometric unlocking.
- **iCloud**: allow or disallow specific iCloud services (backup, keychain sync, private relay, etc.).
- **Multimedia**: allow/disallow camera and related features.
- **Cellular**: control cellular-related settings (app cellular data settings, eSIM, plan changes).
- **Networking**: control AirDrop/AirPrint/AirPlay and other connectivity settings.
- **Accounts**: restrict account modification and (optionally) configure Google and Mail accounts.

<p class="callout info"> Many options in the Apple Policy Editor include a tooltip that documents requirements and supported OS versions. </p>

## Save, delete, and associated devices

 Use **Save policy** to apply your changes. The button is disabled when there are no pending edits, or when the license is expired.

 When editing an existing policy, the page also shows a **Delete policy** action. The editor can show an **Associated devices** list at the bottom, so you can see how many devices are currently using the policy.

## Next pages

- Passcode: configure passcode requirements and related security options.
- Restrictions: define allowed features and OS-level limitations.
- Apps &amp; profiles: configure installed apps and configuration profiles.