MacOS Profiles
 Profiles supported by macOS
If you need to configure a large number of devices or to provide lots of custom email settings, network settings, or certificates to a large number of devices, configuration profiles are an easy way to do it.
Active Directory Payload macOS
This payload can be used to join a macOS device to an Active Directory and configure the domain membership options.
Kernel Extension Policy macOS
This payload can be used to allow applications to run without user prompting
Restrictions Payload MacOS
This payload can be used to restrict access to certain features and capabilities of a macOS device. Some restrictions require that the device is Supervised and is marked with an asterisk.
macOS profiles are distributed to the devices via Apples Device Management.
When profiles are sent from CapaInstaller, complete control is handed over to the Apple Push Notification service that handles he distribution of the profile.
Download, installation and verification is then controlled exclusively by macOS on the target computer.
 Read more
Apple Configuration Profile Reference
Apple Push Notification service - overview