Hello, I’m looking for guidance on the correct escalation process for an Individual-to-Organization migration that has remained unresolved since late August 2026. My Apple Developer Program membership is already paid, with a renewal date of August 4, 2027. However, the Developer portal still says that the migration is being processed and that membership benefits are temporarily disabled. The business is a Polish sole proprietorship registered in CEIDG, with a D-U-N-S Number. I explained this legal structure to Developer Support in August. The D-U-N-S information was confirmed as verified on September 1. There are now two enrollment references associated with the same Apple Account. I followed the requested steps in both paths, but I have not received confirmation of whether the newer enrollment replaces the original migration or whether Support needs to reconcile them. On October 30, I uploaded my passport and English-language CEIDG certificate through Apple’s secure portal. Apple confirmed receipt. I have since followed up through the existing support case, including today, November 11. The current blockers are: The migration remains pending and membership benefits are disabled. Certificates, Identifiers & Profiles remains unavailable. App Store Connect is accessible, but attempting to create an app produces an “Agreement Update” dialog requiring acceptance of the updated Apple Developer Program License Agreement. The Developer account does not show a Review/Agree control for that agreement. Phone support currently appears unavailable in the case portal. We need to release TickerCanvas and Patent Strzelecki on iOS; their Android versions are already published. I understand that individual account matters must be handled privately. My questions here concern the escalation process: How can this existing case reach the team able to resolve a stalled membership migration? If the organization migration cannot be completed promptly, can Support restore the existing paid Individual membership and publishing access without requiring another subscription? How should the updated license agreement be accepted when the pending migration appears to prevent access to the acceptance step? I am happy to provide case and enrollment references privately to an authorized Apple representative. After more than two months, I would appreciate a concrete next step that allows us to resume development and submit our apps. Thank you.

PLEASE ADDRESS ASAP: Muse is #1 on the App Store and Facebook is one of the most blocked apps for Screen Time. This is affecting a vast number of people. Description: When a user blocks the Facebook app in any screen time app, iOS automatically blocks Meta's Muse app too. Every single time. There is no way for the user or the developer to prevent it, allowlist it, or even detect that it happened. Muse shows Apple's generic blocked-app "Restricted" screen instead of the screen time app's own design, so the user cannot tell who blocked it or why. This is the worst possible combination of apps: Facebook is one of the most-blocked app across screen time apps. Muse ("Muse from Meta") is currently the #1 app on the App Store. A huge and fast-growing number of users block Facebook and silently lose the world's most popular new app. Muse launched Sept 8, 2026 and adoption is still climbing -- the affected population grows every day. There is NO workaround whatsoever: Users cannot allowlist Muse: it does not appear in Settings > Screen Time > Always Allowed. Developers cannot prevent it: the Screen Time API offers no opt-out; the extra block is applied by iOS itself. Developers cannot detect it: Muse's token (listed separately in FamilyActivityPicker) corresponds to no real identity anywhere else. Developers cannot customize it: their ShieldConfiguration is never consulted -- Muse gets Apple's generic shield UI. Users cannot even block Muse on purpose: shielding Muse's own token is a silent no-op. Screen Time usage statistics are also wrong -- Muse usage is recorded as "Facebook." This Screen Time bug renders screen time apps effectively unusable if users want to block Facebook and use Muse, which is extremely common. How can we get this addressed as soon as possible? Feedback Assistant ticket: https://feedbackassistant.apple.com/feedback/25019832

Hi there! My claim is that ManagedSettingsStore.TokenExpiryMessage API family doesn't work properly. I'm curious if that's only me, or others have also found it confusing, or non-working? I haven't found much public discussion about it, so this is the start of it. There are multiple confusing scenarios from my playing with it, but the simplest example is that ~30% of my apps NEW users get the ".tokensDidExpire" as soon as they approve Screen Time Permissions. Note that they haven't even seen the FamilyActivityPicker! FB23391495 is the feedback. Apple dev responded, but it didn't give confidence that my bug report was deemed correct (which can be fair!). However, it's current status is "Potential fix identified - For a future OS update," so maybe there is something to it. The API is likely quite difficult to get right, so I am happy to provide feedback on potential implementation so it's 100% solid.

Hi all, I submitted an individual Apple Developer Program enrollment several weeks ago, and it’s still pending. I opened a support case (Case ID: 103004160661) and sent a follow-up, but haven’t heard back. What I’ve tried: Replied to the existing case through the Contact page Checked all email folders for document requests (nothing) Tried enrolling through the Apple Developer app on iPhone. “Enroll Now” is grayed out with: “Enrollment through the Apple Developer app is not available for this Apple Account.” Phone support routes back to the web form Is there anything else I can do to get set up? I’m an independent developer ready to ship multiple apps and would appreciate any guidance from Apple staff or anyone who’s been through this. Thanks, Topher Farrell

I purchased the membership on the 14th of this month—it's the 18th now—and I still haven't received an activation email or any other communication. I've written to support about three times but haven't received a reply; what options can you offer me? compre la membresía el 14 de este mes y ya hoy estamos a 18 y aun no recibo un correco de activacion o de algo , ya le he escrito a soporte como 3 veces y no recibo repuesta , que opciones me dan ?

Hi everyone, I'm enrolling in the Apple Developer Program as an individual and I'm a bit stuck, so I hope someone from Apple can take a look. A few days ago I paid the €98.99 membership fee in the Apple Developer app on my iPhone. The money was taken from my bank account right away, and the "Apple Developer Program Membership" subscription shows as Active in my subscriptions. The problem is that my iPhone was signed in to the App Store with a different Apple ID than the one I use for my developer account. I only realized that afterwards. Around the same time, Apple asked me to verify my ID. I sent my documents and got the email "We received your documents". Right now: My developer account on the website shows "Pending" and keeps asking me to "Complete your purchase". The Apple Developer app says enrollment through the app isn't available for my developer account. The paid subscription is sitting on my other Apple ID. I don't want to pay a second time. Could you please link the payment I already made to my developer account and activate my membership? I've opened a case with Developer Support and added all the details there. Has anyone had this happen with two different Apple IDs? And could someone from Apple Developer Support please check my case? I'm building a game for iOS and can't go any further until the membership is active. Thanks a lot!

Hi everyone, I’m the developer of one sec, an app used by a large number of users globally to reduce time spent on social media and to build healthier digital habits. Because of this, we rely heavily on Apple’s Screen Time / DeviceActivity / FamilyControls, ManagedSettings APIs – and unfortunately, we’re seeing increasingly severe issues in production that directly impact hundreds of thousands of real iOS users. During the past years, we have been busy filing dozens of feedback requests for different Screen Time issues – and there has been no response from Apple at all. Developer Relations might be able to "confirm" that the bugs are present and that they ended up with the right team – but they are never addressed, neither are workarounds provided. Instead, the situation gets worse and worse. iOS 26 introduced a series of heavy regressions (which have been reported via Apple’s official bug report tool "Feedback Assistant" on iOS 26 beta 1 in June 2025 – and have not been addressed 10 Months later). This is very frustrating for us as developers, but also for our end-users who run into these issues every day. In the end this impacts our ability to build an amazing product and hurts revenue (which affects both us and Apple). 1. DeviceActivity thresholds are not firing at all This affects both: our app’s usage of the API and Apple’s own Screen Time limits Radars: FB22304617, FB20526837, FB15491936, FB12195437, FB15663329, FB18198691, FB18289475, FB19827144 2. Screen Time usage data is clearly corrupted Websites showing hundreds of hours per week Up to ~20 hours per day of usage reported for a single domain Radars: FB22304617, FB17777429, FB18464235 3. DeviceActivity thresholds reaching threshold immediately Newly introduced with iOS 26 Reported on iOS 26 beta 1 in June No response so far / no workaround DeviceActivity calls didReachThreshold immediately after creating the DeviceActivityEvent – instead of waiting till the defined threshold is actually reached. Radars: FB13696022, FB18351583, FB21320644, FB18927456, FB18061981 4. Randomly Randomizing ApplicationTokens From time to time, and without consistency, Screen Time suddenly provides new, random, unknown tokens to my app in the ShieldConfigurationDataSource and ShieldActionDelegate. This has been reported on many times before here on the dev forms, many many years back already: https://forums.developer.apple.com/forums/thread/756440 https://forums.developer.apple.com/forums/thread/758325 https://forums.developer.apple.com/forums/thread/758325?answerId=793267022#793267022 Radars: FB14082790 and FB18764644 5. Moving Tokens from one ManagedSettingsStore to Another Removing an ApplicationToken from one SettingsStore and then adding it to another while the target app remains in foreground leads to the re-use of the ShieldConfiguration. Which can be wrong in many scenarios. It is not possible to request a re-request of the ShieldConfiguration in that scenario. Radar: FB14237883 6. Unable to Open Parent App (one sec) from Shield Many times, when a target app is blocked by a shield, the user wants to perform some action (e.g. to unlock more time for the target app via an intervention). That means, that somehow I have to forward the user from a ShieldActionDelegate back into my target app. Unfortunately, there’s no API for that. Many apps on the App Store rely on private API to achieve that, but that’s too risky for a popular app like one sec. Radar: FB15079668 7. Unable to Open Target App from an ApplicationToken When a user has completed an intervention within one sec, and they indend to to continue to the target app, there is no way that one sec can open the target app just from the token alone. Sure, there are URL schemes, but that means the user has to manually assign URL schemes to each ApplicationToken. That is not a very user friendly process (and in many cases impossible, because not every app registers URL schemes). It would be better if there was a way that my app could open a target app directly from an ApplicationToken, e.g. via an AppIntent that can be run on a button press. This way, the selected apps would remain fully private while still offering advanced functionality: struct OpenTargetAppIntent: AppIntent, OpenAppFromApplicationTokenIntent { func perform() { return .result(openAppFromApplicationToken: applicationToken) } } Radar: FB15500695 Summary Thanks a lot for taking the time to read my feedback. If you have any questions, please feel free to reach out to me any time. I’m always happy to provide more details, logs, and steps to reproduce in my radars / feedback requests or in-person in Cupertino. It would be extremely helpful if someone from the Screen Time / DeviceActivity engineering team could: Take a look at the listed radars. Work on bug fixes and be transparent about when fixes will be shipped. Provide workarounds in the meantime. We genuinely want to build great, reliable experiences on top of Screen Time – but in its current state, it’s becoming very difficult to depend on. – Frederik

Hi everyone, I'm enrolling in the Apple Developer Program as an individual and I'm a bit stuck, so I hope someone from Apple can take a look. A few days ago I paid the €98.99 membership fee in the Apple Developer app on my iPhone. The money was taken from my bank account right away, and the "Apple Developer Program Membership" subscription shows as Active in my subscriptions. The problem is that my iPhone was signed in to the App Store with a different Apple ID than the one I use for my developer account. I only realized that afterwards. Around the same time, Apple asked me to verify my ID. I sent my documents and got the email "We received your documents". Right now: • My developer account on the website shows "Pending" and keeps asking me to "Complete your purchase". • The Apple Developer app says enrollment through the app isn't available for my developer account. • The paid subscription is sitting on my other Apple ID.I don't want to pay a second time. Could you please link the payment I already made to my developer account and activate my membership? I've opened a case with Developer Support (case 103005180042) and added all the details there. Has anyone had this happen with two different Apple IDs? And could someone from Apple Developer Support please check my case? I'm building a game for iOS and can't go any further until the membership is active. Thanks a lot!

Setup Parent device: FamilyActivityPicker with a selection created as FamilyActivitySelection(includeEntireCategory: true). The parent selects apps for an always-on block list. The selection is encoded with PropertyListEncoder and sent to our server. Child device: authorized with AuthorizationCenter.shared.requestAuthorization(for: .child). It receives the selection, decodes it, and immediately applies its application tokens. The shield stays on all day, with no schedule: let selection = try PropertyListDecoder().decode(FamilyActivitySelection.self, from: data) ManagedSettingsStore(named: .appBlock).shield.applications = selection.applicationTokensObserved Cases A and B use the same two physical devices with the parent and child roles swapped. In all cases, the Family Sharing group uses legacy Screen Time, because not every device is on iOS 27 and the redesigned Screen Time is not available. CaseParentChildOur app's shieldSystem Screen Time (set by parent)AiOS 27.0.1iOS 18.7.1BlocksBlocksBiOS 18.7.1iOS 27.0.1Does not blockBlocksCiOS 18.7.1iOS 18.7.1BlocksBlocksQuestions Is this a known issue in iOS 27.0.x? Could it be related to issue number 175437403 ("Screen Time restrictions might not apply to child accounts despite being configured"), which the iOS 27 release notes list as fixed? Should tokens selected on an iOS 18 parent device be enforced on an iOS 27 child device? Is there a workaround, or a way to detect that a shield was applied but is not being enforced?

Hello, I’m building an app that helps people spend less time on social media apps. For that, I make heavy use of Apple’s Screen Time APIs, such as ManagedSettings and FamilyControls. When an app is locked using a ShieldConfiguration, the user has to open my app in order to unlock it (e.g. enter a code). This is very cumbersome because no documented API exists to open the parent app (=my app) from the ShieldActionDelegate (also part of my app) when the user presses a button of the ShieldConfiguration. The ShieldActionDelegate callback just offers three options in its ShieldActionResponse: .none .defer .close .openParentApp is missing. We are working around this limitation by sending a local push notification that the user has to tap on. This has multiple drawbacks: It has to be ensured that notification permission has been granted. It has to be ensured that notifications can be delivered even while focus is enabled. Features such as Apple Intelligence notification summaries and notification prioritization can heavily delay delivering notifications and thus frustrate the user. Neither my users nor myself do understand why this is not possible in a smoother way, at least according to the documentation. There are 3rd party apps that have such functionality, they can directly open their own app from a button press in the Shield, see here: https://apps.apple.com/us/app/applocker-passcode-lock-apps/id1132845904 It would be great if Apple could level the playfield for all developers and document how this is achievable, because technically it clearly is. Thanks a lot and have a great day!

Hello Apple Developer Support, I am seeking assistance with an unresolved Apple Developer Program membership suspension. I have contacted Apple Support multiple times, but I have not received a substantive response or a resolution. My details: Team ID: 66V7X33MB7 Membership suspension date: September 23, 2026 Support cases: 102974106735 — Membership and Account 102989934971 — Membership and Account / Program Purchase and Renewal 102994198893 — Development and Technical / Certificates, Identifiers, and Provisioning Profiles Background On September 23, 2026, I received an email from the Apple Developer Relations Team stating that my membership had been suspended due to suspected involvement in digital asset activities under Sections 14.8(a) and 2.8 of the Developer Program License Agreement. I am an individual developer, and my applications do not involve cryptocurrency, digital asset trading, custody, exchanges, or any of the other services listed in Apple's notice. I replied to the original email on September 23 and September 24, and followed up again on October 5. I have received no response from the team handling the review. been sent by the team handling the compliance review. However, I checked my inbox, spam, and other mail folders and could not find that email. However, I checked my inbox, spam, and other mail folders and could not find that email. I followed up with support, but the matter remains unresolved. Current problems The Certificates, Identifiers & Profiles portal displays this error: "Unable to find a team with the given Team ID '66V7X33MB7' to which you belong." The enrollment and renewal process displays this error: "Your Apple Account is already associated with the Account Holder of a membership." My existing apps are no longer available for new downloads on the App Store. I cannot resolve this issue through the developer portal, and my existing support cases have not resulted in a substantive response. My request Could an Apple Developer Support representative please check the status of my existing cases and help route this issue to the appropriate team responsible for the membership suspension and compliance review? I am not trying to create a new membership. I need assistance resolving the suspension of my existing membership and restoring access to my existing developer team. I would greatly appreciate confirmation that this issue has reached the appropriate team and information about the next steps. Thank you for your time and assistance.

Dear Screen Time Team! The current 6 MB memory limit for the DeviceActivityMonitor extension no longer reflects the reality of modern iOS devices or the complexity of apps built on top of the Screen Time framework. When Screen Time APIs were introduced with iOS 15, hardware constraints were very different. Since then, iPhone performance and available RAM have increased significantly…but the extension memory limit has remained unchanged. My name is Frederik Riedel, and I’m the developer of the screen time app “one sec.” Our app relies heavily on FamilyControls, ManagedSettings, and DeviceActivity to provide real-time interventions that help users reduce social media usage. In practice, the 6 MB limit has become a critical bottleneck: The DeviceActivityMonitor extension frequently crashes due to memory pressure, often unpredictably. Even highly optimized implementations struggle to stay within this constraint when using Swift and multiple ManagedSettings stores. The limit makes it disproportionately difficult to build stable, maintainable, and scalable architectures on top of these frameworks. This is not just an edge case…it directly impacts reliability in production apps that depend on Screen Time APIs for core functionality. Modern system integrations like Screen Time are incredibly powerful, but they also require a reasonable amount of memory headroom to function reliably. The current limit forces developers into fragile workarounds and undermines the robustness of apps that aim to improve users’ digital wellbeing. We would greatly appreciate if you could revisit and update this restriction to better align with today’s device capabilities and developer needs. Thank you for your continued work on Screen Time and for supporting developers building meaningful experiences on top of it. Feedback: FB22279215 Best regards, Frederik Riedel (one sec app)

In the process of updating several Apple devices to OS 27.0.1, I accidentally updated my main workstation from Sequoia to Golden Gate. I had intended to do this, but not this soon. Now I find that the Keychain Access App no longer takes my login password to unlock items. Unfortunately, the Passwords App does not allow me to see a number of things that are stored in the Keychain Access App: e.g. Secure Notes. But in this case the problem is an application password for an IRC client. I have no way of recovering my IRC account unless I can supply the password to Keychain Access.

When I tap on one of the buttons in the ShieldAction extension I want to close the shield and open the parent app instead of the shielded app. Is there any way of doing this using the Screen Time API? class ShieldActionExtension: ShieldActionDelegate {      override func handle(action: ShieldAction, for application: ApplicationToken, completionHandler: @escaping (ShieldActionResponse) -> Void) {     // Handle the action as needed.           let store = ManagedSettingsStore()               switch action {     case .primaryButtonPressed:       //TODO - open parent app       completionHandler(.defer)     case .secondaryButtonPressed:       //remove shield       store.shield.applications?.remove(application)       completionHandler(.defer)         @unknown default:       fatalError()     }   }   }

I’m designing a voluntary self-control/safety app for adults using FamilyControls/ManagedSettings with individual authorization. When a user voluntarily starts a timed protection session, can the app hide or block itself for the duration of that session so the user cannot easily locate the app and uninstall it? When the DeviceActivity schedule ends, could an extension remove that restriction so the app becomes available again automatically? I understand that an adult may ultimately be able to revoke Family Controls authorization through Settings. I’m specifically asking whether the app itself can be hidden/blocked during the active session.

I'm building a parental-control app using FamilyControls, ManagedSettings and DeviceActivity. A guardian can lock a child's device from their own device, and the child's device applies the shield locally. The delivery problem: a background push can't wake our app once it has been force-quit, which is common on a child's device, so guardian-initiated changes sit undelivered until the child happens to open the app. I've found that DeviceActivityMonitorExtension still receives intervalDidStart / intervalDidEnd while the app is force-quit, and that a URLSession request started from the extension completes. So I could register a couple of short recurring DeviceActivitySchedule activities purely to wake the extension every ~15 minutes, check the server, and apply the resulting shield. My question: is using DeviceActivitySchedule purely as a wake mechanism — where the schedule doesn't correspond to any real usage-monitoring window — a supported use of the API, or is it working by accident? I'd rather not build on it if it's the latter. Two smaller ones, if anyone knows: Is network activity from the monitor extension expected to be given time to complete, and is there a documented execution budget? I've seen reports here that the extension stops being invoked after some days without the host app launching. Is that expected, and what re-arms it? If there's a supported mechanism for this that I've missed, I'd much rather use it.

Hi, I am developing a Screen Time App and I am having issues with the ShieldConfigurationExtension (ShieldConfigurationDataSource). I know this extensions is sandboxed but I should be able to read data from the main app. I am using SwiftData as my database, but I am unable to initialize it in the extensions with an error indicating insufficient file permissions. I have App Group set up and I am able to share data using UserDefaults but that is just inconvenient. Is there any way I could just open the SwiftData in read only mode so that I could display the user some info on the shield? SwiftData Init: private func setupContainer() throws { let schema = Schema([ DogEntity.self, HouseEntity.self ]) // Use app group container if available let config: ModelConfiguration if let containerURL = FileManager.default.containerURL( forSecurityApplicationGroupIdentifier: "group.\(Bundle.app.bundleIdentifier ?? "")" ) { config = ModelConfiguration(schema: schema, url: containerURL.appendingPathComponent("default.sqlite")) } else { config = ModelConfiguration(schema: schema) } self.container = try ModelContainer(for: schema, configurations: [config]) } Error in extension: fault: Attempt to add read-only file at path file:///private/var/mobile/Containers/Shared/AppGroup/51431199-5919-4AE6-940C-6FE3C53EEB46/default.sqlite read/write. Adding it read-only instead. This will be a hard error in the future; you must specify the NSReadOnlyPersistentStoreOption. error: (3) access permission denied error: Encountered exception error during prepareSQL for SQL string 'SELECT TBL_NAME FROM SQLITE_MASTER WHERE TBL_NAME = 'Z_METADATA'' : access permission denied with userInfo { NSFilePath = "/private/var/mobile/Containers/Shared/AppGroup/51431199-5919-4AE6-940C-6FE3C53EEB46/default.sqlite"; NSSQLiteErrorDomain = 3; } while checking table name from store: <NSSQLiteConnection: 0x154100300> error: Store failed to load. <NSPersistentStoreDescription: 0x15402d590> (type: SQLite, url: file:///private/var/mobile/Containers/Shared/AppGroup/51431199-5919-4AE6-940C-6FE3C53EEB46/default.sqlite) with error = Error Domain=NSCocoaErrorDomain Code=256 "The file “default.sqlite” couldn’t be opened." UserInfo={NSFilePath=/private/var/mobile/Containers/Shared/AppGroup/51431199-5919-4AE6-940C-6FE3C53EEB46/default.sqlite, NSSQLiteErrorDomain=3} with userInfo { NSFilePath = "/private/var/mobile/Containers/Shared/AppGroup/51431199-5919-4AE6-940C-6FE3C53EEB46/default.sqlite"; NSSQLiteErrorDomain = 3; } Any help appreciated 🙂

Hello Apple Developer Support / Developer Community, I’m looking for some guidance regarding an issue with my Apple Developer account and App Store publishing. I have been trying to resolve an account/membership issue so that we can properly publish and manage our product on the App Store. Unfortunately, this process has been taking an unusually long time, and we still have not received a clear explanation or resolution from Apple. My Apple Developer account is currently enrolled as an Individual, and I have been asked to migrate the membership from Individual to Organization. The Developer portal currently shows: “You’ve asked for your membership to be migrated from an individual to an organization.” It also provides the “Continue migration” option and asks for our organization information. However, despite providing the required information and contacting Apple Developer Support multiple times, the process is still not completed. I currently have open Apple Developer Support cases under Membership and Account → Account Information Update: Case ID: 102952447898 — latest communication: September 3, 2026 Case ID: 102945341942 — previous communications: July 18, July 21, and July 27, 2026 The older case has already been open for a significant amount of time, and although we have followed up, we still don't have a clear resolution or actionable feedback. Our main concern We need to understand: What is currently preventing the Individual → Organization migration from being completed? Is any additional information or verification required from us? Is there an issue with our organization information that needs to be corrected? Why is the process taking so long despite the support cases and follow-ups? Can an Apple Developer Relations/support specialist review and escalate this case? This situation is becoming very difficult for our team because we are unable to move forward normally with our App Store publishing process. We completely understand that Apple needs to perform verification and security checks. We are happy to provide any additional documentation or information required. However, after multiple support contacts and a long waiting period, we would really appreciate a clear status update and specific instructions on what we need to do next. If anyone from Apple Developer Support or Developer Relations can look into this or advise us on the correct escalation process, we would sincerely appreciate it. Case IDs: 102952447898 102945341942 Thank you for your time and assistance.

Hi Apple Developer Support, I’m developing an iOS app that uses FamilyControls, ManagedSettings, and DeviceActivity. My app requests Screen Time authorization with: try await AuthorizationCenter.shared.requestAuthorization(for: .individual) Issue: On my development-installed build, AuthorizationCenter.shared.authorizationStatus becomes .approvedWithDataAccess, and the app can display usage data. However, after installing the App Store / App Store Connect distribution build, the same device and same flow returns .approved instead of .approvedWithDataAccess. As a result, the app only treats the authorization as management access, not usage-data access. App details: App name: App时记 Main bundle ID: com.qteqpid.appstop Device Activity Monitor extension: com.qteqpid.appstop.AppStopMonitorExtension Device Activity Report extension: com.qteqpid.appstop.AppStopReportExtension Version/build tested: 2.0 (4) Team ID: 5N6B48T57B What I verified: I exported an App Store Connect IPA from Xcode Organizer on September 3, 2026 and inspected the actual signed entitlements with codesign. The main app and both Screen Time extensions all include: com.apple.developer.family-controls = true com.apple.developer.family-controls.app-and-website-usage = true com.apple.security.application-groups = group.com.qteqpid.appstop get-task-allow = false The DistributionSummary.plist also shows Apple Distribution signing and App Store provisioning profiles for the main app and both extensions. Question: Given that the App Store Connect distribution IPA appears to contain the app-and-website-usage entitlement on the main app and both extensions, what conditions would cause AuthorizationCenter.shared.authorizationStatus to return .approved instead of .approvedWithDataAccess for an .individual authorization? Is there an additional distribution-side approval, App ID setting, provisioning support setting, device state, or Screen Time privacy limitation that can prevent .approvedWithDataAccess even when the signed entitlements are present? I would appreciate guidance on how to verify why data access is not granted in the App Store/TestFlight environment. Thank you.

Hi Apple Team, We are using the Accounts MDM payload with: PayloadType: com.apple.MCX DisableGuestAccount: true On macOS 26, even after the MDM profile is successfully applied, a local Administrator can still toggle the Guest User setting in System Settings. Expected: The setting should be enforced by MDM and should not be modifiable by an Administrator. Interestingly, the same configuration works as expected on macOS 27 beta, where the Guest User setting is shown as “This setting has been configured by a profile” and cannot be modified. Could you please confirm whether this is a known issue/regression in macOS 26 and whether there is a workaround or any permanent solution in later patches ? Environment: macOS 26.x Payload: com.apple.MCX DisableGuestAccount = true macOS 27 beta: Works as expected