Intro to users and user groups in Apple Business Essentials
Users in Apple Business Essentials can be:
Linked to using federated authentication with Google Workspace or Microsoft Active Directory (Azure AD)
Imported from Google Workspace
Imported using System for Cross-domain Identity Management (SCIM) from Azure AD
Each user account may have the following information associated with it, which can be viewed in the account list or when an account is selected:
First, middle, and last name
Managed Apple ID
Roles and Locations
User groups associated
iCloud storage (used, available, total)
When an account is copied from Google Workspace or Azure AD (using SCIM) to Apple Business Essentials, the Roles attribute can be edited.
You can create a group of users in Apple Business Essentials. These are known as user groups and there are two types, Smart User Groups and User Groups. Both types can be assigned to plans and to Collections. A Collection is a group of apps and settings that, when assigned to a user group, provide it with a quick and easy way to automate the assigning of apps and device settings.
Watch a video on managing Users and User Groups.
Note: Users can also be a member of more than one Smart User Group and User Group.
See Add group accounts.
Users can have a status that varies. Depending on the status and the account source, you may be able to perform certain actions on that user account.
New: This user account is new, and the user hasn’t yet signed in.
Active: This user account is active, and the user has signed in at least once.
Deactivated: This user account has been deactivated, and the user is unable to use their Managed Apple ID to sign in.
Locked: This user account has been locked because of too many unsuccessful sign-in attempts.