Apple MDM Plugin inspectors

Use Apple MDM plugin inspectors in BigFix MCM and BigFix Mobile to retrieve device-specific data from managed macOS, iOS, and iPadOS devices.

Apple MDM plugin inspectors are read-only properties provided by BigFix to retrieve real-time information from macOS and iOS devices managed through the Apple MDM plugin. These inspectors help administrators evaluate device status, configuration, and compliance across the Apple device fleet. Use these inspectors to build custom relevance expressions, reports, and dashboards or trigger automation in BigFix based on Apple device attributes.

Applications

Inspector	Return Type	Description
versions of applications	string	Returns the version number of each installed application.
names of applications	string	Returns the display name of each installed application.
identifiers of applications	string	Returns the unique identifier (bundle ID) of each installed application.
bundle sizes of applications	integer	Returns the total size of the app bundle on the device.
installings of applications	boolean	Returns true if the application is currently being installed.

Cellular Radio

Inspector	Return Type	Description
cellular technology of cellular radio	integer	Returns an integer representing the current cellular technology (e.g., LTE).
data roaming enabled of cellular radio	boolean	Returns true if data roaming is enabled on the device.
eas device identifier of cellular radio	string	Returns the Exchange ActiveSync (EAS) device identifier for cellular connection.
roaming of cellular radio	boolean	Returns true if the device is currently roaming on a cellular network.
personal hotspot enabled of cellular radio	boolean	Returns true if the personal hotspot is enabled on the device.
voice roaming enabled of cellular radio	boolean	Returns true if voice roaming is enabled on the device.

Device

Inspector	Return Type	Description
total space of device	integer	Total storage space on device
free space of device	integer	Available free storage space
management status of device	string	Status of device management enrollment
architecture of device	string	Processor architecture
sip enabled of device	boolean	Returns trueif System Integrity Protection is enabled.
languages of device	string	Returns list of language codes. Returns none if no languages set.
locales of device	string	Returns list of locale codes. Returns none if no locales set.
device locator service of device	boolean	Returns true if device locator service is enabled.
activation lock of device	boolean	Returns true if Activation Lock is enabled
model name of device	string	Model name
password set of firmware password status	boolean	Password set status. Returns trueif password is set.
pending change of firmware password status	boolean	Pending password change status
roms enabled of firmware password status	boolean	ROMs enabled status
battery level of device	float	Battery level as fraction. Returns a value between 0 and 1.
awaiting configuration of device	boolean	Is device awaiting configuration? Returns TRUE or FALSE.
cloud backup enabled of device	boolean	Cloud backup enabled. Returns TRUE or FALSE.
mdm lost mode enabled of device	boolean	Lost mode enabled via MDM. Returns TRUE or FALSE.
supervised of device	boolean	Supervised device status. Returns TRUE or FALSE.
itunes store account hash of device	string	Returns hashed iTunes Store account ID
itunes store account active of device	boolean	Is iTunes Store account active? Returns TRUE or FALSE.
last cloud backup date of device	time	Timestamp of last cloud backup
recovery lock of device	boolean	Recovery lock enabled. Returns TRUE or FALSE
passcode present of device	boolean	Is passcode set? Returns TRUE or FALSE.
activation lock supported of device	boolean	Does device support activation lock? Returns TRUE or FALSE.
apple silicon of device	boolean	Apple Silicon architecture present? Returns TRUE or FALSE.
pin for device lock of device	boolean	PIN required for device lock? Returns TRUE or FALSE.
pin for erase device of device	boolean	PIN required to erase device? Returns TRUE or FALSE.
supports ios apps of device	boolean	Supports iOS apps? Returns TRUE or FALSE.
meid of device	string	Mobile Equipment Identifier
software update id of device	string	Software update identifier
time zone of device	string	Device time zone setting
object type of device	string	Object type
ownership of device	string	Ownership type
secure boot level of secure boot	string	Secure boot level status
external boot level of secure boot	string	External boot level status
phone number of service subscription	string	Phone numbers linked to device subscriptions
imei of service subscription	string	IMEIs linked to device subscriptions
eid of service subscription	string	EIDs linked to device subscriptions
iccid of service subscription	string	ICCIDs linked to device subscriptions
subscriber carrier network of service subscription	string	Subscriber carrier networks linked to device

Disk Encryption

Inspector	Return Type	Description
enabled of disk encryption	boolean	Whether disk encryption is enabled. Returns TRUE or FALSE.
has institutional key of disk encryption	boolean	Whether an institutional key is present. Returns TRUE or FALSE.
has recovery key of disk encryption	boolean	Whether a recovery key is present. Returns TRUE or FALSE.

Hardware

Inspector	Return Type	Description
serial of hardware	string	Unique hardware serial identifier
proxied of hardware	boolean	Whether hardware is proxied. Returns TRUE or FALSE.
uuid of hardware	string	Unique Universal Identifier (UUID)
model of hardware	string	Model number or code of hardware
manufacturer of hardware	string	Name of hardware manufacturer

Installed Certificates

Inspector	Return Type	Description
subject common name of certificate	string	Common name field from installed certificates
identity certificate of certificate	boolean	Whether the certificate is an identity certificate/ Returns TRUE or FALSE.

Machine

Inspector	Return Type	Description / Notes
family name of main processor	string	Family name of the main processor
brand string of main processor	string	Brand string of the main processor
machine name	string	Name of the machine (e.g., model code)
mdm server address	string	Address of the connected MDM server
data source	string	Indicates the data source (e.g., MDM-MacOS)

Network

Inspector	Return Type	Description / Notes
mac address of ip interface	string	MAC address of IP interfaces of the network
mac address of network adapter	string	MAC address of adapters of the network
friendly name of network adapter	string	Friendly name of adapters of the network

Operating System

Inspector	Return Type	Description / Notes
mobile of operating system	boolean	Indicates if the OS is on a mobile device. Returns TRUE or FALSE.
release of operating system	string	Release version of the OS
architecture of operating system	string	CPU architecture of the OS
machine of operating system	string	Machine identifier for the OS
product info string of operating system	string	OS product info string
name of operating system	string	OS name (e.g., macOS)
codename of operating system	string	Codename of the OS release
mac of operating system	boolean	Indicates if mac hardware is used/ Returns TRUE or FALSE.
embedded of operating system	boolean	Indicates if the OS is embedded. Returns TRUE or FALSE.
version of operating system	string	Full version number
major version of operating system	integer	Major version component
minor version of operating system	integer	Minor version component
releaseid of operating system	string	Release identifier
sip enabled of operating system	boolean	System Integrity Protection enabled. Returns TRUE or FALSE.
little endian of operating system	boolean	Indicates little-endian architecture. Returns TRUE or FALSE.
big endian of operating system	boolean	Indicates big-endian architecture. Returns TRUE or FALSE.
catalog url of software update status of operating system	string	URL of software update catalog
auto check of software update status of operating system	boolean	Auto check for updates enabled. Returns TRUE or FALSE.
auto app installation of software update status of operating system	boolean	Auto install of app updates enabled. Returns TRUE or FALSE.
auto os installation of software update status of operating system	boolean	Auto install of OS updates enabled. Returns TRUE or FALSE.
background download of software update status of operating system	boolean	Background download enabled. Returns TRUE or FALSE.
default catalog of software update status of operating system	boolean	Default catalog used. Returns TRUE or FALSE.
perform periodic check of software update status of operating system	boolean	Periodic check for updates. Returns TRUE or FALSE.
previous scan date of software update status of operating system	DateTime	Last scan timestamp
previous scan result of software update status of operating system	integer	Result code of last scan
install sizes of available updates of operating system	integer	Size of update installations in bytes
major os updates of available updates of operating system	boolean	Indicates if update is a major OS update. Returns TRUE or FALSE.
download sizes of available updates of operating system	float	Download size of the update in bytes.
names of available updates of operating system	string	Name(s) of available updates
config data updates of available updates of operating system	boolean	Indicates if update is a config data update. Returns TRUE or FALSE.
criticals of available updates of operating system	boolean	Indicates if update is critical. Returns TRUE or FALSE.
firmware updates of available updates of operating system	boolean	Indicates if update includes firmware updates. Returns TRUE or FALSE.
metadata urls of available updates of operating system	string	URL to update metadata
product names of available updates of operating system	string	Product name associated with update
restart requireds of available updates of operating system	boolean	Indicates if restart is required. Returns TRUE or FALSE.
versions of available updates of operating system	string	Version of the update
builds of available updates of operating system	string	Build number of the update

OS Update Setting

Inspector	Return Type	Description / Notes
catalogue url of os update setting	string	Catalog URL used for OS updates
default of os update setting	boolean	Indicates whether this is the default update setting. Returns TRUE or FALSE.
previous scan date of os update setting	DateTime	Last time the system checked for updates
previous scan result of os update setting	integer	Result code from the last update scan
perform periodic check of os update setting	boolean	Whether periodic update checks are enabled. Returns TRUE or FALSE.
auto check enabled of os update setting	boolean	Whether automatic checking for updates is enabled. Returns TRUE or FALSE.
background download enabled of os update setting	boolean	Whether background downloading of updates is enabled. Returns TRUE or FALSE.
auto app installation enabled of os update setting	boolean	Whether app updates are installed automatically. Returns TRUE or FALSE.
auto os installation enabled of os update setting	boolean	Whether OS updates are installed automatically. Returns TRUE or FALSE.
auto security updates enabled of os update setting	boolean	Whether security updates are installed automatically, Returns TRUE or FALSE.

Power Level

Inspector	Return Type	Description / Notes
power level	enum	The current power level status of the device
full of power level	boolean	Whether the power level is considered "full". Returns TRUE or FALSE.
low of power level	boolean	Whether the power level is considered "low". Returns TRUE or FALSE.
normal of power level	boolean	Whether the power level is considered "normal". Returns TRUE or FALSE.

Primary User

Inspector	Return Type	Description / Notes
user name of primary user	string	The short name or login name of the primary user
user principal name of primary user	string	The UPN (User Principal Name) of the primary user
managed apple id of primary user	string	The Managed Apple ID associated with the primary user
name of groups of primary user	string	The name of a group the primary user is part of
set of groups of primary user	string	A bitmask representing group membership
names of attributes of primary user	string	List of attribute names associated with the primary user
value of attributes of primary user	string	Values of the corresponding attributes of the primary user

Profiles

Inspector	Return Type	Description / Notes
has removal passcode of profiles	boolean	Indicates if a removal passcode is set for the profile. Returns TRUE or FALSE.
encrypted of profiles	boolean	Indicates if the profile is encrypted. Returns TRUE or FALSE.
identifiers of mac profile payloads of profiles	String	Identifier of the macOS profile payload
names of mac profile payloads of profiles	string	Name of the macOS profile payload
descriptions of mac profile payloads of profiles	string	Description of the macOS profile payload
organizations of mac profile payloads of profiles	string	Organization associated with the macOS profile payload
types of mac profile payloads of profiles	string	Type of the macOS profile payload
UUIDs of mac profile payloads of profiles	string	UUID of the macOS profile payload
versions of mac profile payloads of profiles	integer	Version of the macOS profile payload
name of profiles	string	The display name of the installed profile
identifier of profiles	string	Unique identifier of the profile
organization of profiles	string	Organization specified in the profile
UUID of profiles	string	UUID of the profile
payload removal disallowed of profiles	boolean	Indicates if the profile can be removed by the user. Returns TRUE or FALSE.