Manage content tokens in Apple Business
Overview
External device management services assign content to devices or users by communicating with Apple Business. For your service to link and communicate, a content token is required. Contact your developer for specific information about installing the token in your service.
If you need to migrate legacy user-based tokens, see Migrate content tokens.
Important: If your organization uploaded a content token to an external device management service and you want to use the built-in device management service, you need to remove it to avoid inconsistencies in app licence inventory and app assignment failures. This applies to the original organization only, not to any organizational units.
When does a content token become invalid?
Content tokens become invalid:
One year after they’re created.
When the password is changed for the Managed Apple Account used to download the existing token.
When a content token is invalid, app and book licence communication between Apple Business and your external device management service stops.
To avoid interruption of service, manually create a Managed Apple Account, create a custom role, and assign it only the Assign licences for Apps and Books permission to download and manage content tokens.
Download a content token
In Apple Business, sign in with a user whose role has permissions to get licences for apps and books.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose Settings > Payments & Billing.
Select Apps and Books, then select Download to download the content token for one of the device management services.
Use content tokens with external device management services
In Apple Business, another device management service can use content tokens that represent organizational units other than the primary organizational unit. To use a content token with an external device management service:
In Apple Business, sign in with a user whose role has permissions to get licences for apps and books.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose Devices > Management Services.
Create an additional organizational unit if one doesn’t already exist. See Add organizational units.
Transfer any licences you want to use in the new organizational unit. See Transfer licences to another organizational unit.