Enforce notification settings to ensure the Cortex XDR agent can alert users.
Enforce notification settings to ensure the Cortex XDR agent can alert users.
On iOS, the system only allows one global notifications payload for the entire system. Depending on your current configuration, if there is already a profile to allow notifications to other apps, we advise you to edit that same profile and add a new entry for the Cortex XDR app.
Note
If there are multiple notification profiles assigned to the same device, the first profile to arrive at the device will be installed, and all subsequent ones will fail to install, in line with Apple requirements.
If this is the first notification profile, you can import the pre-configured Intune policy supplied here. This profile was created manually in Intune, and then exported to JSON format. You can import this policy directly into iOS configuration profiles, create, import policy, save.
You can also create your own profile, manually.
If you have a pre-configured JSON file (such as the Cortex XDR Notifications file shown below), you can import it directly to create a new policy without manually selecting settings.
Navigate to Devices+iOS/iPadOS+Configuration profiles.
In the top menu bar, click Create+Import Policy.
An Import policy (preview) pane will open. Be aware that importing creates a new, distinct policy, and original assignments will not be copied.
Under Policy file, browse for and upload your JSON configuration file (for example,
Cortex XDR Notifications_2024-05-23T19_26_27.648Z.json).For New name, enter a name for the policy (for example,
Cortex XDR Notifications).For New description, enter a meaningful description for the policy.
Click Save to create the policy.
Click the name of the policy you just imported (for example, Cortex XDR Notifications).
In the policy overview, scroll down to the Assignments section and click Edit.
Under Included groups, click + Add groups.
Search for, and select your target group (for example, "Cortex XDR Sales Org Iphones").
Click Select, then click Review + save.
Click Save again to confirm. The policy is now applied to the selected devices.
{
"@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/configurationPolicies/$entity",
"createdDateTime": "2024-05-23T10:23:01.9842189Z",
"creationSource": null,
"description": "",
"lastModifiedDateTime": "2024-05-23T10:23:22.026505Z",
"name": "Cortex XDR Notifications",
"platforms": "iOS",
"priorityMetaData": null,
"roleScopeTagIds": [
"0"
],
"settingCount": 1,
"technologies": "mdm,appleRemoteManagement",
"id": "09a11c3a-4cbe-4c1e-85e3-e4c8a4e8e57c",
"templateReference": {
"templateId": "",
"templateFamily": "none",
"templateDisplayName": null,
"templateDisplayVersion": null
},
"settings": [
{
"id": "0",
"settingInstance": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance",
"settingDefinitionId": "com.apple.notificationsettings_com.apple.notificationsettings",
"settingInstanceTemplateReference": null,
"groupSettingCollectionValue": [
{
"settingValueTemplateReference": null,
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings",
"settingInstanceTemplateReference": null,
"groupSettingCollectionValue": [
{
"settingValueTemplateReference": null,
"children": [
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_alerttype",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_alerttype_1",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_badgesenabled",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_badgesenabled_true",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_bundleidentifier",
"settingInstanceTemplateReference": null,
"simpleSettingValue": {
"@odata.type": "#microsoft.graph.deviceManagementConfigurationStringSettingValue",
"settingValueTemplateReference": null,
"value": "com.paloaltonetworks.cortex.ios"
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_criticalalertenabled",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_criticalalertenabled_false",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_groupingtype",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_groupingtype_0",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_notificationsenabled",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_notificationsenabled_true",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_previewtype",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_previewtype_0",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_showincarplay",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_showincarplay_true",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_showinlockscreen",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_showinlockscreen_true",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_showinnotificationcenter",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_showinnotificationcenter_true",
"children": []
}
},
{
"@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
"settingDefinitionId": "com.apple.notificationsettings_notificationsettings_item_soundsenabled",
"settingInstanceTemplateReference": null,
"choiceSettingValue": {
"settingValueTemplateReference": null,
"value": "com.apple.notificationsettings_notificationsettings_item_soundsenabled_true",
"children": []
}
}
]
}
]
}
]
}
]
}
}
]
}Navigate to Devices+iOS/iPadOS+Configuration profiles+Create+New Policy.
For Platform, select iOS/iPadOS.
For Profile type, select Settings catalog.
For Name, enter the profile Cortex XDR Notifications.
In the Settings picker, select User Experience+Notifications.
Check Notification Settings, configure Bundle Identifier as
com.paloaltonetworks.cortex.ios, accept the defaults for all the other fields, and save the policy.On the Assignments tab, click on the name of your policy (for example, Cortex XDR Notifications).
In the policy overview, scroll down to the Assignments section and click Edit.
Under Included groups, click + Add groups.
Search for, and select your target group (for example, "Cortex XDR Sales Org Iphones").
Click Select, then click Review + save.
Click Save again to confirm. The policy is now applied to the selected devices.