Temporarily allow App Store installs for one iOS device without affecting a shared policySolved

Participant
Discussion
1 month ago Oct 01, 2026

We have an iOS policy that blocks users from installing apps, so the App Store is hidden on managed devices. One employee needs to install apps temporarily for about a week, but the same policy is assigned to many other employees.

Is there a way to allow app installation only for one user or one device without changing the restriction for everyone? I also want to avoid existing apps being reinstalled or losing app data during the policy change.

Replies (1)

Marked SolutionPending Review
Hexnode Expert
1 month ago Oct 01, 2026
Marked SolutionPending Review

Hello @ezekiel ,

Hexnode UEM applies iOS restrictions through policies. There is no separate one-time permission toggle that can override a restriction for only one user or device while the same restrictive policy remains applied for others.

For this scenario, the recommended approach is:

  1. Duplicate the existing iOS policy.
  2. In the duplicated policy, go to iOS > Restrictions > Basic.
  3. Under Allow Application Settings, enable Install apps.
  4. Assign the duplicated policy only to the required device.
  5. Remove that device from the original restrictive policy for the temporary period.
  6. After the required period, move the device back to the original policy.

When Install apps options is enabled, the App Store icon becomes available again on the iOS device, and the user can manually search, download, and update apps.

Before switching policies, also check whether the original policy contains Required Apps. If Policies > iOS > App Management > Required Apps has the Remove apps from the device on policy removal option enabled, removing that policy can uninstall managed apps from the device. This can also remove local app data. Disable that option before disassociating the policy if you want managed apps and their local data to remain on the device.

Regards,
Simon Scott
Hexnode UEM

Save