Create or reset user passwords in Apple Business

Overview

When new user accounts are created in Apple Business, you need to communicate a temporary password to them. When users sign in for the first time, they need to create a new password for their Managed Apple Account. Invited users use their current unmanaged Apple Account password.

Temporary passwords

Apple Business creates temporary passwords for accounts that are created manually. These temporary passwords are valid for 90 days and are for users of the accounts to sign in with their Managed Apple Account, at which point users need to change their password. If an Apple device appears in the Inventory list in Apple Business, authentication is handled differently than a device that isn’t in the Inventory list.

Important: Apple Business never shows the password of an account after it has been changed from the temporary password.

For all Apple Business roles, sign-in always requires that user’s Managed Apple Account, password, and a six-digit verification code.

Roles that can reset passwords

Password resets can be done by users with the following roles:

Organization Administrator: Can reset passwords for all other users regardless of role.
IT Administrator: Can reset passwords for all other users except those with the role of Organization Administrator.
Custom role: Any user whose role has permissions to reset Managed Apple Account passwords.

Resetting a user’s password allows them to get a new temporary password, at which time they’ll have to create a new password for their Managed Apple Account.

Organization Administrator password resets

Users with the role of Organization Administrator can also reset their password using iforgot.apple.com. When the user initiates a password reset, the following occurs:

If there is only one user with the role of Organization Administrator, they can reset their password immediately.
If there is more than one user with the role of Organization Administrator, each user receives an email informing them that a password reset has been requested by another user with the role of Organization Administrator. They can then sign in to Apple Business and reset the password for that user.

Important: If the password isn’t reset by another user with the role of Organization Administrator within 72 hours, a link is sent to the verified email address and the verified phone number of the Managed Apple Account. The link is valid for seven days and allows a user—after two-factor verification is complete—to reset their password.

Configure the password reset permission for Organization Administrators

Important: Be sure to add the role of Organization Administrator to a user account before you deselect the password reset permission. If you lose access to all Organization Administrator roles, you need to contact AppleCare to confirm your identity and initiate the password reset. See Get Support for Apple Business.

In Apple Business, sign in with a user who has the role of Organization Administrator.
In your browser, choose Settings > Roles & Permissions.
Select the Organization Administrator role, select Edit, then do one of the following:
- To remove the password reset permission, deselect its checkbox, then select Save.
- To add the password reset permission, select its checkbox, then select Save.

Create sign-in information for a single user

In Apple Business, sign in with a user whose role has permissions to create, edit, and delete Managed Apple Accounts.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose People > Users.
If necessary, search for the user in the search field. See How to search.
Select the user from the list.
Select Create Sign-in to create new sign-in information for a user that hasn’t yet signed in with their Managed Apple Account.
Select how you want to send the information to the user.
You can download PDF and comma-separated value (.csv) files, or you can email the information to the selected user.
Select your method, then do one of the following:
- If you selected .csv and PDF, select Download and choose from the following:
  - 1-up PDF : This option creates a single page for the user.
  - .csv : This option creates a .csv file with five columns: the user’s Managed Apple Account; their first, middle, and last name; and their information.
- If you selected email, Apple Business sends the information to the email address listed in the user’s account details. The user receives an email with their Managed Apple Account and temporary password.
Select Continue.
A new activity is created.
Choose one of the following:
- Stop the activity.
- View the activity.
- Select Close.
- Wait for the activity to complete, then select Done.

Reset a password for a single user

In Apple Business, sign in with a user whose role has permissions to create, edit, and delete Managed Apple Accounts.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose People > Users.
If necessary, search for the user in the search field. See How to search.
Select the user from the list.
Select Reset Password to reset the password of a user that has forgotten their password.
Select how you want to send the information to the user.
You can download PDF and comma-separated value (.csv) files, or you can email the information to the selected user.
Select your method, then do one of the following:
- If you selected .csv and PDF, select Download and choose from the following:
  - 1-up PDF : This option creates a single page for the user.
  - .csv : This option creates a .csv file with five columns: the user’s Managed Apple Account; their first, middle, and last name; and their information.
- If you selected email, Apple Business sends the information to the email address listed in the user’s account details. The user receives an email with their Managed Apple Account and temporary password.
Choose whether to sign out of any Apple devices or websites where this account is currently signed in.
Select Continue.
A new activity is created.
Choose one of the following:
- Stop the activity.
- View the activity.
- Select Close.
- Wait for the activity to complete, then select Done.

Create sign-in information for multiple users

In Apple Business, sign in with a user whose role has permissions to create, edit, and delete Managed Apple Accounts.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose People > Users.
If necessary, search for the users in the search field. See How to search.
Select the users from the list.
Select Create next to Create Sign-Ins.
You can download PDF and comma-separated value (.csv) files, or you can email the information to the selected users.
Select your method, then do one of the following:
- If you selected .csv and PDF, select Download and choose from the following:
  - 1-up PDF : This option creates a single page for the user.
  - 8-up PDF : This option creates eight users per page.
  - .csv : This option creates a .csv file with five columns: the user’s Managed Apple Account; their first, middle, and last name; and their temporary password.
- If you selected email, Apple Business sends the information to the email addresses listed in the users’ account details. The users receive an email with their Managed Apple Account and temporary password.
Select Continue.
A new activity is created.
Choose one of the following:
- Stop the activity.
- View the activity.
- Select Close.
- Wait for the activity to complete, then select Done.

Reset passwords for multiple users

In Apple Business, sign in with a user whose role has permissions to create, edit, and delete Managed Apple Accounts.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose People > Users.
If necessary, search for the users in the search field. See How to search.
Select the users from the list.
Select Reset next to Reset Passwords.
You can download PDF and .csv files, or you can email the information to the selected users.
Select your method, then do one of the following:
- If you selected .csv and PDF, select Download and choose from the following:
  - 1-up PDF : This option creates a single page for the user.
  - 8-up PDF : This option creates eight users per page.
  - .csv : This option creates a .csv file with five columns: the user’s Managed Apple Account; their first, middle, and last name; and their temporary password.
- If you selected email, Apple Business sends the information to the email addresses listed in the users’ account details. The users receive an email with their Managed Apple Account and temporary password.
Choose whether to sign out of any Apple devices or websites where these accounts are currently signed in.
Select Continue.
A new activity is created.
Choose one of the following:
- Stop the activity.
- View the activity.
- Select Close.
- Wait for the activity to complete, then select Done.

هل كان هذا مفيدًا؟

Apple Business User Guide