Intro to roles and privileges in Apple School Manager
Overview
Every Apple School Manager user has one or more roles that define what the user can do. Certain roles can manage other roles. For example, a user with the role of Instructor can manage a user with the role of Student. In this way, an instructor can change a student’s passcode.
Users with the role of Administrator, Site Manager, or People Manager can’t sign in using federated authentication; they can only manage the federation process.
All users assigned to nonstudent roles need to be the age of majority in the jurisdiction in which the Apple School Manager organization is enrolled (at least 18 years of age in many countries or regions).
In addition, each role consists of a set of privileges, which affect all users that have that role. Student roles have limited privileges, Instructor and Manager roles have more, and users with the role of Administrator have the most. To edit roles, you need to have the appropriate privileges. You’re unable to add a privilege that you yourself don’t have.
Important: If a user with a role of Administrator, Manager, or Instructor is also assigned a Student role, they’re unable to get licenses for apps and books.
What default roles can manage other roles?
Role | Can manage (including password resets) the following other roles |
|---|---|
Administrator | Other Administrators Site Manager Content Manager Device Enrollment Manager People Manager Manager Staff Instructor Student |
Site Manager | Other Site Managers People Manager Device Enrollment Manager Content Manager Manager Staff Instructor Student |
People Manager | Other People Managers Site Manager Device Enrollment Manager Content Manager Manager Staff Instructor Student |
Content Manager | None |
Device Enrollment Manager | None |
Manager | Staff Instructor Student |
Staff | None |
Instructor | Student |
Student | None |
Staff, Instructor, and Student roles
To view the default privileges for these roles, see:
Privilege lists
To view tables of roles and their default privileges select any of the following: