iOS SecConfig Updates

- Updated Min OS version
- Added Siri Translation (Personal + Supervised)
- Added Managed Pastebin (Supervised)

iOS/Compliance/level-1-iOS_iPadOS-basic-security-compliance.json

@@ -1,7 +1,7 @@
 {
     "@odata.type":  "#microsoft.graph.iosCompliancePolicy",
     "description":  "This compliance policy is the minimum security configuration for personal and supervised devices where users access work or school data. This configuration is applicable to most mobile users.",
-    "displayName":  "iOS/iPadOS basic security compliance (Level 1) v1.0",
+    "displayName":  "iOS/iPadOS basic security compliance (Level 1) v1.1",
     "scheduledActionsForRule":[{"ruleName":"PasswordRequired","scheduledActionConfigurations":[{"actionType":"block","gracePeriodHours":0,"notificationTemplateId":""}]}],
     "passcodeBlockSimple":  true,
     "passcodeExpirationDays":  null,
@@ -12,7 +12,7 @@
     "passcodeMinimumCharacterSetCount":  null,
     "passcodeRequiredType":  "numeric",
     "passcodeRequired":  true,
-    "osMinimumVersion":  "13.7",
+    "osMinimumVersion":  "14.8",
     "osMaximumVersion":  null,
     "osMinimumBuildVersion":  null,
     "osMaximumBuildVersion":  null,

iOS/Compliance/level-3-iOS_iPadOS-high-security-compliance.json

@@ -1,7 +1,7 @@
 {
     "@odata.type":  "#microsoft.graph.iosCompliancePolicy",
     "description":  "This compliance policy is for devices used by specific users or groups who are uniquely high risk (for example, users who handle highly sensitive data where unauthorized disclosure causes considerable material loss to the organization).",
-    "displayName":  "iOS/iPadOS high security compliance (Level 3) v1.2",
+    "displayName":  "iOS/iPadOS high security compliance (Level 3) v1.3",
     "scheduledActionsForRule":[{"ruleName":"PasswordRequired","scheduledActionConfigurations":[{"actionType":"block","gracePeriodHours":0,"notificationTemplateId":""}]}],   
     "passcodeBlockSimple":  true,
     "passcodeExpirationDays":  365,
@@ -12,7 +12,7 @@
     "passcodeMinimumCharacterSetCount":  null,
     "passcodeRequiredType":  "numeric",
     "passcodeRequired":  true,
-    "osMinimumVersion":  "14.6",
+    "osMinimumVersion":  "15.0",
     "osMaximumVersion":  null,
     "osMinimumBuildVersion":  null,
     "osMaximumBuildVersion":  null,

iOS/Personal/level-1-iOS_iPadOS-personal-basic-security-configuration.json

@@ -5,7 +5,7 @@
     "deviceManagementApplicabilityRuleOsVersion":  null,
     "deviceManagementApplicabilityRuleDeviceMode":  null,
     "description":  "This device restriction configuration policy is the minimum security configuration for personally owned devices where users access work or school data.",
-    "displayName":  "iOS/iPadOS Personal basic security configuration (Level 1) v1.0",
+    "displayName":  "iOS/iPadOS Personal basic security configuration (Level 1) v1.1",
     "accountBlockModification":  false,
     "activationLockAllowWhenSupervised":  false,
     "airDropBlocked":  false,
@@ -186,6 +186,13 @@
     "sharedDeviceBlockTemporarySessions":  false,
     "appClipsBlocked":  false,
     "applePersonalizedAdsBlocked":  false,
+    "nfcBlocked":  false,
+    "autoUnlockBlocked":  false,
+    "unpairedExternalBootToRecoveryAllowed":  false,
+    "onDeviceOnlyDictationForced":  false,
+    "wiFiConnectToAllowedNetworksOnlyForced":  false,
+    "onDeviceOnlyTranslationForced":  false,
+    "managedPasteboardRequired":  false,
     "kioskModeAppType":  "notConfigured",
     "appsSingleAppModeList":  [
 

iOS/Personal/level-2-iOS_iPadOS-personal-enhanced-security-configuration.json

@@ -5,7 +5,7 @@
     "deviceManagementApplicabilityRuleOsVersion":  null,
     "deviceManagementApplicabilityRuleDeviceMode":  null,
     "description":  "This device restriction configuration policy introduces data transfer controls for managed apps. This is the configuration that is applicable to most mobile users accessing work or school data using personally owned devices.",
-    "displayName":  "iOS/iPadOS Personal enhanced security configuration (Level 2) v1.1",
+    "displayName":  "iOS/iPadOS Personal enhanced security configuration (Level 2) v1.2",
     "accountBlockModification":  false,
     "activationLockAllowWhenSupervised":  false,
     "airDropBlocked":  false,
@@ -190,6 +190,9 @@
     "autoUnlockBlocked":  false,
     "unpairedExternalBootToRecoveryAllowed":  false,
     "onDeviceOnlyDictationForced":  true,
+    "wiFiConnectToAllowedNetworksOnlyForced":  false,
+    "onDeviceOnlyTranslationForced":  true,
+    "managedPasteboardRequired":  false,
     "kioskModeAppType":  "notConfigured",
     "appsSingleAppModeList":  [
 

iOS/Personal/level-3-iOS_iPadOS-personal-high-security-configuration.json

@@ -5,7 +5,7 @@
     "deviceManagementApplicabilityRuleOsVersion":  null,
     "deviceManagementApplicabilityRuleDeviceMode":  null,
     "description":  "This device restriction configuration policy is for devices used by specific users or groups who are uniquely high risk (for example, users who handle highly sensitive data where unauthorized disclosure causes considerable material loss to the organization).",
-    "displayName":  "iOS/iPadOS Personal high security configuration (Level 3) v1.1",
+    "displayName":  "iOS/iPadOS Personal high security configuration (Level 3) v1.2",
     "accountBlockModification":  false,
     "activationLockAllowWhenSupervised":  false,
     "airDropBlocked":  false,
@@ -190,6 +190,9 @@
     "autoUnlockBlocked":  true,
     "unpairedExternalBootToRecoveryAllowed":  false,
     "onDeviceOnlyDictationForced":  true,
+    "wiFiConnectToAllowedNetworksOnlyForced":  false,
+    "onDeviceOnlyTranslationForced":  true,
+    "managedPasteboardRequired":  false,
     "kioskModeAppType":  "notConfigured",
     "appsSingleAppModeList":  [
 

iOS/Supervised/level-1-iOS_iPadOS-supervised-basic-security-configuration.json

@@ -5,7 +5,7 @@
     "deviceManagementApplicabilityRuleOsVersion":  null,
     "deviceManagementApplicabilityRuleDeviceMode":  null,
     "description":  "This device restriction configuration policy is the minimum security configuration for corporate owned supervised devices where users access work or school data.",
-    "displayName":  "iOS/iPadOS Supervised basic security configuration (Level 1) v1.0",
+    "displayName":  "iOS/iPadOS Supervised basic security configuration (Level 1) v1.1",
     "accountBlockModification":  false,
     "activationLockAllowWhenSupervised":  true,
     "airDropBlocked":  false,
@@ -186,6 +186,13 @@
     "sharedDeviceBlockTemporarySessions":  false,
     "appClipsBlocked":  false,
     "applePersonalizedAdsBlocked":  false,
+    "nfcBlocked":  false,
+    "autoUnlockBlocked":  false,
+    "unpairedExternalBootToRecoveryAllowed":  false,
+    "onDeviceOnlyDictationForced":  false,
+    "wiFiConnectToAllowedNetworksOnlyForced":  false,
+    "onDeviceOnlyTranslationForced":  false,
+    "managedPasteboardRequired":  false,
     "kioskModeAppType":  "notConfigured",
     "appsSingleAppModeList":  [
 

iOS/Supervised/level-2-iOS_iPadOS-supervised-enhanced-security-configuration.json

@@ -5,7 +5,7 @@
     "deviceManagementApplicabilityRuleOsVersion":  null,
     "deviceManagementApplicabilityRuleDeviceMode":  null,
     "description":  "This device restriction configuration policy introduces data transfer controls for managed apps. This is the configuration that is applicable to most mobile users accessing work or school data using supervised devices.",
-    "displayName":  "iOS/iPadOS Supervised enhanced security configuration (Level 2) v1.1",
+    "displayName":  "iOS/iPadOS Supervised enhanced security configuration (Level 2) v1.2",
     "accountBlockModification":  false,
     "activationLockAllowWhenSupervised":  true,
     "airDropBlocked":  false,
@@ -190,6 +190,9 @@
     "autoUnlockBlocked":  false,
     "unpairedExternalBootToRecoveryAllowed":  false,
     "onDeviceOnlyDictationForced":  true,
+    "wiFiConnectToAllowedNetworksOnlyForced":  false,
+    "onDeviceOnlyTranslationForced":  true,
+    "managedPasteboardRequired":  true,
     "kioskModeAppType":  "notConfigured",
     "appsSingleAppModeList":  [
 

iOS/Supervised/level-3-iOS_iPadOS-supervised-high-security-configuration.json

@@ -5,7 +5,7 @@
     "deviceManagementApplicabilityRuleOsVersion":  null,
     "deviceManagementApplicabilityRuleDeviceMode":  null,
     "description":  "This device restriction configuration policy is for supervised devices used by specific users or groups who are uniquely high risk (for example, users who handle highly sensitive data where unauthorized disclosure causes considerable material loss to the organization).",
-    "displayName":  "iOS/iPadOS Supervised high security configuration (Level 3) v1.1",
+    "displayName":  "iOS/iPadOS Supervised high security configuration (Level 3) v1.2",
     "accountBlockModification":  true,
     "activationLockAllowWhenSupervised":  true,
     "airDropBlocked":  true,
@@ -190,6 +190,9 @@
     "autoUnlockBlocked":  true,
     "unpairedExternalBootToRecoveryAllowed":  false,
     "onDeviceOnlyDictationForced":  true,
+    "wiFiConnectToAllowedNetworksOnlyForced":  false,
+    "onDeviceOnlyTranslationForced":  true,
+    "managedPasteboardRequired":  true,
     "kioskModeAppType":  "notConfigured",
     "appsSingleAppModeList":  [