Glossary

Supervised mode

Supervised mode is a level of management on iPhone, iPad and Apple TV that gives the MDM more control than a standard enrollment: silent app installs, Single App Mode, web content filtering, blocking profile removal. It's set during initial setup, through Apple Business Manager or Apple Configurator, and signals the device is company-owned.

How it works

Apple distinguishes two levels. A regular MDM enrollment (the kind a user can add from Settings) accepts most configuration payloads but leaves the user in charge: they can remove management, and some restrictions simply don't apply. Supervision removes that safety valve. It can only be set while the device is being set up, either automatically via Automated Device Enrollment from Apple Business Manager, or manually by connecting the device to a Mac running Apple Configurator (or, since iOS 17, using Apple Configurator on iPhone to add it to ABM).

A supervised device accepts the full list of restrictions Apple publishes, currently well over 100 keys. Examples: disable AirDrop, force a specific wallpaper, prevent app removal, install apps without prompting, enable Lost Mode, delay OS updates by up to 90 days.

The user sees a line on the lock screen and in Settings stating that the device is supervised and managed by the organization.

Why it matters for a fleet

Half of what admins expect from an iPad fleet only works supervised. Kiosk mode. Silent VPP app installs. Lost Mode that locks the device and shows a message even without a passcode. Blocking the user from unenrolling.

It also settles the ownership question. Apple treats supervision as the marker of a corporate device, and its privacy documentation tells users exactly what a supervised device exposes.

The constraint is planning. Supervision can't be added to a device already in use without a factory reset. If you're deploying 300 iPads, decide before they're handed out.

How Appaloosa handles it

Appaloosa enrolls iOS and iPadOS devices as supervised through Apple Business Manager, and applies the supervised-only controls from the MDM console: kiosk mode, silent app deployment via Apple VPP, security restrictions and remote wipe. Devices added to ABM with Apple Configurator follow the same path after a reset.

Explore

See the full platform

Enrollment, apps, security, remote support: all in one place.

Explore Appaloosa →

Ready to try Appaloosa? Start free

Frequently asked questions

Can I supervise an iPhone that's already in use?

Only after a factory reset. Add the device to Apple Business Manager using Apple Configurator on iPhone (iOS 16 or later), then erase it. On the next setup it goes through Automated Device Enrollment and comes back supervised. Back up any local data first.

What can a supervised device do that an unsupervised one can't?

Single App Mode, silent app installation and removal, web filtering, blocking AirDrop or iMessage, preventing management profile removal, Lost Mode, delaying OS updates, forcing Wi-Fi on, and dozens more. Apple's configuration profile reference lists each restriction with a "supervised only" flag.

Is supervision the same as Apple Business Manager enrollment?

Related but distinct. Apple Business Manager is the portal that assigns devices to your MDM. Automated Device Enrollment through ABM supervises the device by default. Apple Configurator can also supervise a device without ABM, though it's rare today.