Apple Business Essentials User Guide
- Welcome
-
-
- Intro to federated authentication
- Use federated authentication with Google Workspace
- Use federated authentication with Microsoft Entra ID
- Use federated authentication with your identity provider
- Change a user’s domain information
- Transfer Apple services to a Managed Apple Account
- Disconnect federation from a domain
-
-
- Intro to buying content
- Review content payment and billing information
- Select and buy content
- Configure app installation and removal
- Monitor app installation status and license tracking
- Learn about Custom Apps
- Transfer licenses
- Manage content tokens
- Migrate content tokens
- Invite VPP purchasers
- Plan for migration to Apps
-
- Intro to configuring settings
-
- AirDrop settings
- AirPlay settings
- AirPrint settings
- App Access settings
- Apple Intelligence & Siri settings
- Application Layer Firewall settings
- Certificate settings
- Content Caching settings
- Configure a Custom setting
- Data Management settings
- Energy Saver settings
- FileVault settings
- Gatekeeper settings
- iCloud settings
- Lock Screen settings
- Password and Screen Lock settings
- Software Update settings
- VPN settings
- Web Clip settings
- Web Filter settings
- Wi-Fi settings
- Edit a setting
- Apply Collections
- Document revision history
- Copyright

Use a Managed Apple Account to enroll your device
You can choose to enroll your iPhone or iPad into Apple Business Essentials through User Enrollment or your Mac through Device Enrollment. This allows users to access work data associated with managed apps on personal devices, while helping keep personal data private and separated from your organization.
Before you enroll, confirm with your IT administrator that your device can be managed and make sure your device is upgraded to iOS 15, iPadOS 15, macOS 14.1, or later.
Enroll your iPhone or iPad
Unlock your iPhone or iPad, then go to Settings > General > VPN & Device Management.
Select “Add a Work or School Account.”
Sign in with the Managed Apple Account and password given to you by your organization.
If necessary, change your temporary password and create a new password.
Select “Allow Remote Management.”
After you’re enrolled, you’ll receive managed apps and settings from your organization. When the device is unenrolled and removed from management, all configuration profiles, their settings, and managed apps based on your enrollment are removed with it. Any personal data remains secure and private from your organization.
Enroll your Mac
Log in to your Mac, then go to System Settings > Privacy & Security > Profiles.
Click “Sign In” next to Work or School Account.
Sign in with the Managed Apple Account and password given to you by your organization.
If necessary, change your temporary password and create a new password.
Select “Allow” on the Remote Management screen.