Configuration Profile Layout
This page provides a detailed breakdown of a macOS configuration profile in XML (plist) format. Each element is explained to help you understand how to configure and interpret configuration profiles.
ConsentText
Section titled “ConsentText”- ConsentText: Text displayed to users to inform them about terms, conditions, or warnings before applying the profile.
- default: The default consent message shown to users.
PayloadContent
Section titled “PayloadContent”- PayloadContent: An array of dictionaries, each representing a payload (setting or policy) included in the profile.
Example Payload (com.apple.screensaver)
Section titled “Example Payload (com.apple.screensaver)”- PayloadIdentifier: A unique identifier for this payload.
- PayloadType: The type of payload, specifying the domain or feature being configured.
- PayloadUUID: A unique UUID for this payload.
- PayloadVersion: The version number of this payload.
- askForPassword: If
true
, requires a password to unlock the screensaver. - askForPasswordDelay: The delay (in seconds) before requiring a password after the screensaver starts.
- idleTime: Time (in seconds) of inactivity before the screensaver activates.
- loginWindowIdleTime: Time (in seconds) of inactivity at the login window before the screensaver activates.
- moduleName: The name of the screensaver module to use.
Other Top-Level Keys
Section titled “Other Top-Level Keys”- PayloadDescription: A description of the profile and its purpose.
- PayloadDisplayName: The display name for the profile.
- PayloadIdentifier: A unique identifier for the entire profile.
- PayloadOrganization: The organization responsible for the profile.
- PayloadScope: The scope of the profile (e.g.,
System
). - PayloadType: The type of the profile (should be
Configuration
). - PayloadUUID: A unique UUID for the profile.
- PayloadVersion: The version number of the profile.
Complete Example
Section titled “Complete Example”<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict> <key>ConsentText</key> <dict> <key>default</key> <string>THE SOFTWARE IS PROVIDED 'AS IS' WITHOUT ANY WARRANTY OF ANY KIND, EITHER EXPRESSED, IMPLIED, OR STATUTORY, INCLUDING, BUT NOT LIMITED TO, ANY WARRANTY THAT THE SOFTWARE WILL CONFORM TO SPECIFICATIONS, ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND FREEDOM FROM INFRINGEMENT, AND ANY WARRANTY THAT THE DOCUMENTATION WILL CONFORM TO THE SOFTWARE, OR ANY WARRANTY THAT THE SOFTWARE WILL BE ERROR FREE. IN NO EVENT SHALL NIST BE LIABLE FOR ANY DAMAGES, INCLUDING, BUT NOT LIMITED TO, DIRECT, INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES, ARISING OUT OF, RESULTING FROM, OR IN ANY WAY CONNECTED WITH THIS SOFTWARE, WHETHER OR NOT BASED UPON WARRANTY, CONTRACT, TORT, OR OTHERWISE, WHETHER OR NOT INJURY WAS SUSTAINED BY PERSONS OR PROPERTY OR OTHERWISE, AND WHETHER OR NOT LOSS WAS SUSTAINED FROM, OR AROSE OUT OF THE RESULTS OF, OR USE OF, THE SOFTWARE OR SERVICES PROVIDED HEREUNDER.</string> </dict> <key>PayloadContent</key> <array> <dict> <key>PayloadIdentifier</key> <string>alacarte.macOS.all_rules.4413990e-a57b-4e0e-8902-59f780718b1c</string> <key>PayloadType</key> <string>com.apple.screensaver</string> <key>PayloadUUID</key> <string>4413990e-a57b-4e0e-8902-59f780718b1c</string> <key>PayloadVersion</key> <integer>1</integer> <key>askForPassword</key> <true/> <key>askForPasswordDelay</key> <integer>5</integer> <key>idleTime</key> <integer>1200</integer> <key>loginWindowIdleTime</key> <integer>1200</integer> <key>moduleName</key> <string>Sequoia</string> </dict> </array> <key>PayloadDescription</key> <string>Created: 2025-07-23Configuration settings for the com.apple.screensaver preference domain.</string> <key>PayloadDisplayName</key> <string>[all_rules] com.apple.screensaver settings</string> <key>PayloadIdentifier</key> <string>com.apple.screensaver.all_rules</string> <key>PayloadOrganization</key> <string>macOS Security Compliance Project</string> <key>PayloadScope</key> <string>System</string> <key>PayloadType</key> <string>Configuration</string> <key>PayloadUUID</key> <string>8e4caf27-a378-4fca-b753-a87d8123636b</string> <key>PayloadVersion</key> <integer>1</integer></dict></plist>