In this exercise, you will use the Advanced Security Controls payload to create a profile that will restrict the launch of specific applications on macOS devices. For this exercise, you will restrict the execution of three applications: Google Chrome, Audacity, and Keynote.

To get the desired result, perform the following steps:

1. In the Workspace ONE console, select Resources, and then click Profiles.
2. From the Add drop-down menu, select Add Profile.
3. Select the Profile Platform by clicking Apple macOS.
4. For the Management Type, select Imperative.
5. Select Device for the profile Context.
6. Click Next.
7. Enter macOS – App Restrictions for the profile name.
8. Scroll down the list of payloads until you find Advanced Security Controls. Click Add.
9. Under Bundle IDs, enter com.google.Chrome.
10. Under Names, enter Audacity.
11. Under CD Hash values, enter the CD Hash for Keynote. At the time this document was written, the CD Hash for Keynote was 4018b8220285d74951c40f349bf97373d296dd75. 

12. For Display message dialogue when blocked, click Enable.
13. In the Message field, enter This application is restricted.

14. Click Next.
15. Click on the line next to Smart Group, and select Corporate-owned macOS Devices.
16. Select Auto for the Assignment Type.
17. Select Never for Allow Removal.
18. Click Save & Publish.