The Apple iCloud Policy enables administrators to centrally manage iCloud features across macOS, iOS, and iPadOS devices.
This policy provides granular control over iCloud sync, backup, document storage, Photos, Keychain, and other Apple cloud services.
It is especially useful for organizations with compliance requirements, data residency restrictions, or security controls that limit cloud storage usage.

Some features require:

This policy allows IT administrators to:

All controls are applied silently on the device through MDM.

Below is a breakdown of all available iCloud controls included in this policy.

Controls whether devices can back up to iCloud.

Note: On unsupervised devices, this restriction is deprecated and will be supervised-only in future releases.

Allows or prevents syncing documents and app data to iCloud.

Controls whether iCloud Keychain can synchronize passwords and secure items.

Allows managed apps to use iCloud for syncing.

Controls Safari bookmark syncing via iCloud.

Controls iCloud Calendar syncing.

Controls syncing of Contacts.

Controls the iCloud Drive “Desktop & Documents” sync feature.

Controls use of iCloud Mail services.

Controls syncing of Notes via iCloud.

Controls syncing of Reminders via iCloud.

Controls backup of Enterprise Books.

Controls sync of highlights, notes, and metadata for Enterprise Books.

Disables Shared Photo Streams (Shared Albums).

On unsupervised devices, Shared Stream restriction is deprecated.

Controls iCloud Photos (formerly iCloud Photo Library).

Controls My Photo Stream functionality.

Controls the deprecated Back to My Mac feature.

Controls Apple’s privacy-focused Private Relay feature.

Controls syncing of Freeform app boards through iCloud.

Devices will enforce the settings on the next MDM sync.