# Block & Allow Apps

> Block or allow Apps on iOS and macOS Devices through Applivery Policies — control which Apps users can access.

Source: https://docs.applivery.com/en/device-management/apple/app-management/block-allow-apps/  •  Last updated: 2026-06-09

**Key topics:** App blocking on iOS and macOS, App allowing on iOS and macOS, Applivery MDM configuration, Mobile device security, Application management policies, Applivery, iOS, macOS, Apple, Finder, Siri, VPP, App Store

---

**TL;DR:** Use Applivery to control app access on iOS and macOS devices by blocking unwanted apps and allowing only approved applications.

Whether you’re aiming to enhance security or streamline productivity, the ability to manage which applications can or cannot run on enrolled Devices is crucial.

This article dives into the two key approaches: app blocking and app allowing through Applivery.

-   **App blocking** involves the selective restriction of certain applications from executing on managed Devices. This can be particularly useful to mitigate security risks. By creating a block list, administrators can prevent specified Apps from launching, thereby safeguarding sensitive data.
    
-   Conversely, app allowing, often referred to as **whitelisting**, centers around permitting only a predefined list of applications to operate on enrolled Devices. This method is employed when organizations seek to optimize productivity by ensuring users have access to only the essential tools. By creating an App whitelist, administrators can ensure that only approved applications are available for use, minimizing potential security vulnerabilities.
    

## Allow a list of Apps for iOS Devices

**Navigate to Policies**

Once in the [**Applivery Dashboard**](https://dashboard.applivery.io/), go to any of your **Policies** 1. From the left side menu, go to **Apps** 2 and click the **\+ Add App** button 3.

![add app](https://docs.applivery.com/int/_r2/media/09ac0a4e-3ad8-478f-9f15-3474973eec71/60758bac-26a3-4146-8d5a-7a02a4159e10.png)

Through any of the available tabs (App Store, Applivery), you can search for and add the applications that will be part of your whitelist of applications.

It is necessary to specify whether the application is intended for iOS or macOS. Additionally, you will need to indicate if the App holds a VPP license (more details available [here](https://docs.applivery.com/en/device-management/apple/app-management/vpp/)).

![](https://docs.applivery.com/int/_r2/media/09ac0a4e-3ad8-478f-9f15-3474973eec71/730a96c8-fe28-4d49-9985-2f165114cfd0.png)

**Configure the Allow list**

You will need to configure the **Allow / Block List** setting. From the left-hand menu, select **\+ Add configuration** 4, choose **Restrictions** 5, and navigate to the **Allow / Block List** 6 section.

![allow list](https://docs.applivery.com/int/_r2/media/09ac0a4e-3ad8-478f-9f15-3474973eec71/a813ebcb-44ab-457a-8952-267fcb446afc.png)

Then, select **Allow only some Apps** 7 and add the applications that will be included in this list.

![Apps in allow list](https://docs.applivery.com/int/_r2/media/09ac0a4e-3ad8-478f-9f15-3474973eec71/da8197f4-323a-496c-859d-4b081274ecd4.png)

## Block a list of Apps for iOS Devices

**Configure the Block list**

Just like if you were configuring a whitelist of Apps, now you will need to select the **Do not allow Apps** 8 option. The App will be blocked, and users won’t be able to install it.

![block list of Apps](https://docs.applivery.com/int/_r2/media/09ac0a4e-3ad8-478f-9f15-3474973eec71/f1f5cf01-fa59-4f4c-a728-cff4ce0871ef.png)

## Block a list of Apps for macOS Devices

:::warning
Certain system Apps, such as Finder and Siri, automatically relaunch and stay open on macOS. Since these Apps attempt to open continuously, blocking them results in endless blocked-access pop-ups on the Device.
:::
:::warning
To block applications on macOS Devices, the Applivery MDM must be enabled at the Policy level.
:::

**Navigate to Policies and Agent Settings**

Once in the [**Applivery Dashboard**](https://dashboard.applivery.io/), go to any of your **Policies** 1. From the left side menu, go to the **Agent** 2 section and **Enable** it 3.

![enable agent](https://docs.applivery.com/int/_r2/media/09ac0a4e-3ad8-478f-9f15-3474973eec71/934274ea-4f07-4b42-8bbd-25d397a785fc.png)

You’ll then be able to create a list of Apps by clicking the **\+ Add** button.

![block list macos](https://docs.applivery.com/int/_r2/media/09ac0a4e-3ad8-478f-9f15-3474973eec71/ad30d0cf-be80-4326-8864-10baea8d3b05.png)

:::warning
Many preinstalled Apps are located on the [signed system volume](https://support.apple.com/en-gb/guide/security/secd698747c9/web), making them impossible to delete. However, you can remove them from the Dock using a Policy, and if a user tries to open one, an alert will notify them that the App cannot be launched.
:::