The MDM configuration bundle that encodes what the device is and isn't allowed to do. Each restriction is a key-value pair pushed to the device via MDM. Supervised iPhones accept a much larger set of restriction keys than unsupervised ones — including the "no Safari", "no App Store", and "no VPN installation" keys that make a real kosher iPhone possible.
Related terms
This term is connected to the broader supervised iPhone ecosystem. See the [full glossary](/glossary/) or return to [how it works](/how-it-works) for context.