List Installed Configuration Profiles with profiles list

Inspect MDM and configuration profiles from the terminal, including ones System Settings hides.

macOSconfigurationprofilesmdmLow risk
Run `profiles list` (or `profiles show -type configuration`) to enumerate every installed profile with its UUID and payload types.

01Command

Command
$ profiles list
# Only configuration profiles:
profiles show -type configuration

02What it does

Configuration profiles enforce settings like Wi-Fi restrictions, certificates, and screen-lock policies, and some are invisible in System Settings. `profiles list` prints each profile's description, UUID, verification status, and whether it was installed by MDM — the `organization` and `removalDisallowed` fields tell you if it is company-managed. It is the first command to run when a setting refuses to change for no apparent reason.

03Risk

RiskLow risk
!Warning: Removal of MDM-installed profiles is blocked unless MDM allows it; `sudo profiles remove -identifier` only works for manually installed ones.

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

Last verified: 2026-09-17 · Category: Security & Privacy