Intro to users and user groups in Apple Business Manager
Users in Apple Business Manager can be created manually. They are also created after you:
sync with Google Workspace
Sync with Microsoft Entra ID or your identity provider (IdP) using Open ID Connect (OIDC)
Sync with your IdP using System for Cross-domain Identity Management (SCIM)
Each user account may have the following information associated with it, which can be viewed in the account list or when an account is selected:
status
first, middle and last name
Managed Apple Account
Roles and Locations
authentication type
user groups associated
email address
person number
cost centre
department
division
When an account is copied from Google Workspace, Microsoft Entra ID or your IdP (using SCIM) to Apple Business Manager, the Roles attribute can be edited.
User groups
You can create a group of users in Apple Business Manager. These are known as user groups and there are two types, Smart User Groups and User Groups.
Note: Users can also be a member of more than one Smart User Group and User Group.
See Add group accounts.
User status
Users can have a status that varies. Depending on the status and the account source, you may be able to perform certain actions on that user account.
New: this user account is new, and the user has not yet signed in.
Active: this user account is active, and the user has signed in at least once.
Deactivated: This user account has been deactivated, and the user is unable to use their Managed Apple Account to sign in.
Locked: this user account has been locked because of too many unsuccessful sign-in attempts.
Status | Actions |
|---|---|
New | Delete |
Active | Deactivate Delete |
Deactivated | Reactivate Delete |
Locked | Reset password |