# Apple policy: Restrictions

 The Restrictions sections control which OS features are allowed on managed Apple devices. In the Apple Policy Editor, these options are exposed as grouped panels with multiple toggles.

<p class="callout info"> Many restrictions are only supported on specific OS versions and may require supervised devices. Use the tooltips in the dashboard for authoritative requirements. </p>

## Security

- **Allow auto unlock**
- **Allow Fingerprint for Unlock**
- **Allow Fingerprint Modification**

## iCloud

- **Allow iCloud address book**
- **Allow iCloud backup**
- **Allow iCloud bookmarks**
- **Allow iCloud calendar**
- **Allow iCloud desktop and documents**
- **Allow iCloud document sync**
- **Allow iCloud Freeform**
- **Allow iCloud keychain sync**
- **Allow iCloud Mail**
- **Allow iCloud Notes**
- **Allow iCloud Photo Library**
- **Allow iCloud Private Relay**
- **Allow iCloud Reminders**

## Multimedia

- **Allow camera**
- **Allow File Sharing Modification**
- **Allow Files USB Drive Access**

## Cellular

- **Allow app cellular data modification**
- **Allow cellular plan modification**
- **Allow eSIM modification**
- **Allow eSIM outgoing transfers**

## Networking

- **Allow AirDrop**
- **Allow AirPlay incoming requests**
- **Allow AirPrint**
- **Allow AirPrint credentials storage**
- **Allow AirPrint iBeacon discovery**
- **Allow Bluetooth modification**
- **Allow Bluetooth Sharing modification**
- **Allow Files Network Drive Access**
- **Allow Internet Sharing Modification**

## Accounts (restriction)

 The Accounts panel contains both a restriction and (optionally) account configuration. The restriction toggle controls whether the user can modify system accounts.

- **Allow account modification**