MAM policy

Basics
Name
	V1-IMS-iOS-Level 2 Data Protection
Description
	https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-framework#level-2-enterprise-enhanced-data-protection
Platform
	iOS/iPadOS
Apps
Target to apps on all device types
	Yes
Device types
	No Device types
Public apps
	All Microsoft Apps
Custom apps
	No Custom apps
Data protection
Prevent backups
	Block
Send org data to other apps
	Policy managed apps
Select apps to exempt
	Default: skype;app-settings;calshow;itms;itmss;itms-apps;itms-appss;itms-services;
Select universal links to exempt
	http://facetime.apple.com
	http://maps.apple.com
	https://facetime.apple.com
	https://maps.apple.com
Select managed universal links
	http://*.appsplatform.us/*
	http://*.onedrive.com/*
	http://*.powerapps.cn/*
	http://*.powerapps.com/*
	http://*.powerapps.us/*
	http://*.powerbi.com/*
	http://*.service-now.com/*
	http://*.sharepoint-df.com/*
	http://*.sharepoint.com/*
	http://*.yammer.com/*
	http://*.zoom.us/*
	http://*collab.apps.mil/l/*
	http://*devspaces.skype.com/l/*
	http://*teams-fl.microsoft.com/l/*
	http://*teams.live.com/l/*
	http://*teams.microsoft.com/l/*
	http://*teams.microsoft.us/l/*
	http://app.powerbi.cn/*
	http://app.powerbi.de/*
	http://app.powerbigov.us/*
	http://msit.microsoftstream.com/video/*
	http://tasks.office.com/*
	http://to-do.microsoft.com/sharing*
	http://web.microsoftstream.com/video/*
	http://zoom.us/*
	https://*.appsplatform.us/*
	https://*.onedrive.com/*
	https://*.powerapps.cn/*
	https://*.powerapps.com/*
	https://*.powerapps.us/*
	https://*.powerbi.com/*
	https://*.service-now.com/*
	https://*.sharepoint-df.com/*
	https://*.sharepoint.com/*
	https://*.yammer.com/*
	https://*.zoom.us/*
	https://*collab.apps.mil/l/*
	https://*devspaces.skype.com/l/*
	https://*teams-fl.microsoft.com/l/*
	https://*teams.live.com/l/*
	https://*teams.microsoft.com/l/*
	https://*teams.microsoft.us/l/*
	https://app.powerbi.cn/*
	https://app.powerbi.de/*
	https://app.powerbigov.us/*
	https://msit.microsoftstream.com/video/*
	https://tasks.office.com/*
	https://to-do.microsoft.com/sharing*
	https://web.microsoftstream.com/video/*
	https://zoom.us/*
Save copies of org data
	Block
Allow user to save copies to selected services
	OneDrive for Business
	SharePoint
	Photo Library
Transfer telecommunication data to
	Any dialer app
Dialer App URL Scheme
	No Dialer App URL Scheme
Transfer messaging data to
	Any messaging app
Messaging App URL Scheme
	No Messaging App URL Scheme
Receive data from other apps
	All Apps
Open data into Org documents
	Allow
Allow users to open data from selected services
	OneDrive for Business
	SharePoint
	Camera
	Photo Library
Restrict cut, copy, and paste between other apps
	Policy managed apps with paste in
Cut and copy character limit for any app
	0
Third party keyboards
	Allow
Encrypt org data
	Require
Sync policy managed app data with native apps or add-ins
	Allow
Printing org data
	Allow
Restrict web content transfer with other apps
	Microsoft Edge
Unmanaged browser protocol
	No Unmanaged browser protocol
Org data notifications
	Allow
Access requirements
PIN for access
	Not required
PIN type
	Numeric
Simple PIN
	Allow
Select minimum PIN length
	6
Touch ID instead of PIN for access (iOS 8+/iPadOS)
	Allow
Override biometrics with PIN after timeout
	Require
Timeout (minutes of inactivity)
	1440
Face ID instead of PIN for access (iOS 11+/iPadOS)
	Allow
PIN reset after number of days
	No
Number of days
	0
App PIN when device PIN is set
	Require
Work or school account credentials for access
	Not required
Recheck the access requirements after (minutes of inactivity)
	30
Conditional launch
Setting Value Action
Offline grace period 20160 Block access (minutes)
Offline grace period 90 Wipe data (days)
Disabled account Block access
Jailbroken/rooted devices Block access
Min OS version 15.0 Block access
Assignments
Included groups
	Dynamic Licensed Users Group
Excluded groups
No results.