Create a Device Level macOS iCloud Access Policy

This policy manages user access to iCloud features. Apple’s iCloud service lets users securely store photos, files, notes, passwords, and other data in the cloud. This policy is supported on all macOS versions that JumpCloud supports.

Prerequisites

• Apple Mobile Device Management (MDM) must be configured for your organization and Mac computers must be enrolled in JumpCloud MDM. See Set up Apple MDM. 
• This policy is supported on Mac computers running macOS 11 and later.
• Devices must have an active network connection for this policy to take effect.

Considerations

• For changes to take effect, log out and then log back in to the JumpCloud Admin Portal.

Creating the Policy

To create a iCloud Access policy for Mac computers, do the following:

Selecting the Policy Template

1. Log in to the JumpCloud Admin portal.

2. Go to Device Management > Policy Management. The Policy Management page is displayed.
3. On the Policy Management page, click +Add New.
4. Select Device Policy to assign the policy to devices and device groups. On the New Device Policy page:
   • Select the macOS tab.
   • Search and select the required policy and click Configure. The Details tab of the policy is displayed.
   • On the Details tab, configure the required policy configuration settings.
   • (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
   • (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy

• Under Settings, select Allow Cloud Bookmarks to enable users to sync their iCloud Bookmarks.  
• Select Allow Cloud Mail to enable user access to macOS iCloud Mail services.
• Select Allow Cloud Calendar to enable user access to iCloud Calendar services and the Calendar app.
• Select Allow Cloud Reminders to enable user access to iCloud Reminder services.
• Select Allow Cloud Address Book to enable user access to iCloud Address Book services.
• Select Allow Cloud Notes to enable user access to iCloud Notes services.
• Select Allow Cloud Document Sync to enable document and key-value syncing to iCloud. 
• Select Allow Cloud Keychain Sync to enable user access to iCloud keychain synchronization.
• Select Allow Cloud Photo Library to enable user access to the iCloud Photo Library. Any photos not downloaded to the device from the iCloud Photo Library will be removed from local storage.
• Select Allow Cloud Desktop And Documents to enable  user access to iCloud shared desktops and document.

Applying the Policy

• (Optional) Select the Policy Groups tab. Select one or more policy groups where you want to add this policy. 
• Select the Device Groups tab. Select one or more device groups where you want to apply this policy. For device groups with multiple OS member types, the policy only applies when a user logs into a supported Mac computer that is enrolled in Apple MDM.
• Or, select the Devices tab. Select one or more devices whom you want to add this policy to.
• Click Create Policy. A success message is displayed indicating the completion of policy creation.

Viewing Policy Status

1. Select the Status tab.
2. To see the last Result Log for a device where this policy is applied, click view.