Home > Endpoint Management > Profiles and Settings > iOS Supervision

iOS Supervision

Device supervision is an important concept to understand when enrolling iOS devices in an EMM solution like Systems Manager. Supervising your iOS devices allows Systems Manager to manage many additional device settings, like locking a device into a single app, specifying a homescreen layout, or restricting access to additional apps like iMessage.

Enrolling your devices in supervised mode is typically recommended if your devices are organization-owned, or if you want to have deeper levels of control over your devices. Note that supervising a device requires either setting up devices as new, or factory resetting existing devices. 

Device Enrollment Program (DEP) 

Note: DEP can be used to enroll devices without supervision as well, while still automating MDM enrollment during the device setup process.

DEP allows you to permanently manage your organization's macOS and iOS devices. Your devices need to qualify with Apple's program to use this method, but it grants you the most control over your devices. For example, DEP allows you to make MDM enrollment mandatory and unremovable, and also automates enrollment into Systems Manager so that it happens automatically during the initial device setup.

Please reference our DEP deployment guide for information on how to link your account and supervise devices with DEP.

Apple Configurator 

Apple Configurator can be used to bulk configure and deploy iOS devices that do not qualify for DEP. This method requires connecting your iOS devices to a Mac to supervise.

Please reference our documentation for instructions on using Apple Configurator 2.5 or laterApple Configurator 2.0Apple Configurator 1.5, or Apple Configurator 1.4 and earlier.

Supervised Settings

Systems Manager supports additional restrictions and settings payloads on supervised devices. For example, the iOS supervised restrictions can be accessed by navigating to Systems Manager > Manage > Settings, clicking + Add Settings, selecting Restrictions, and scrolling to the 'iOS restrictions (supervised) section. 


Additional iOS settings payloads like Wallpaper, Education, Home Screen Layout, Notifications, and more also require devices be supervised, and are indicated so with a badge. For more info on specific settings, review the Configuration Settings article.

Screen Shot 2018-04-26 at 5.38.03 PM.png


  • If the profile contains only Device functionality under iOS supervised restrictions and is pushed to a non-supervised device, the profile will still deploy, but these 'supervised' restrictions will simply be ignored by the device.
  • If the profile contains any other restrictions under iOS supervised restrictions (ie. Single App Mode, Web content filter, etc.) or supervised payloads and is pushed to a non-supervised device, the entire settings profile may fail to deploy to the device (an error will report on the client's 'activity log'). The restrictions must be removed, or the device must be supervised, in order for the settings profile to properly deploy.  

  • The client's details page will report whether or not the device is supervised. You can also add the 'Supervised?' column in the clients list page to check in bulk.


Last modified



This page has no classifications.

Explore the Product

Click to Learn More

Article ID

ID: 1253

Explore Meraki

You can find out more about Cisco Meraki on our main site, including information on products, contacting sales and finding a vendor.

Explore Meraki

Contact Support

Most questions can be answered by reviewing our documentation, but if you need more help, Cisco Meraki Support is ready to work with you.

Open a Case

Ask the Community

In the Meraki Community, you can keep track of the latest announcements, find answers provided by fellow Meraki users and ask questions of your own.

Visit the Community