Apply Blueprints in Apple Business
Overview
Apple Business includes a feature called Blueprints, which allows you to assign apps and configurations to your users, user groups, and devices.
Applying a Blueprint to a user group is a quick and easy way to automate the assigning of apps and device configurations. For example, if you wanted to add an app for users to use and also configure the firewall configurations, you can create a Blueprint with that app and the configuration. When you assign a user group to that Blueprint, all users get the app and the firewall configuration on their Mac is managed. If a user replaces their Mac, the app is pushed down again and the firewall configuration is configured on their new Mac.
Multiple Blueprints can also be assigned to user groups, users, or devices.
Note: Apple Business alerts you if you don’t have enough app licenses. Even if you lack what you need, you can still assign Blueprints to user groups, users, or devices, keeping in mind that you need to get more licenses.
Assigning Blueprints
When Blueprints are assigned to a user group, all users in the group get the apps and configurations in that Blueprint on all devices associated with them. When a user is removed from a group, all apps that are associated with that user are removed. Configurations that were applied are returned to their default state.
Blueprints can also be assigned to individual users. When a Blueprint is removed from a user, the same app and configuration behavior applies.
For devices not associated with a specific user (for example, an iPad used as a kiosk or sign-in station), you can assign Blueprints directly to those devices. Device Blueprints are supported on iPhone, iPad, Mac, and Apple TV.
Multiple app behavior
If a user is a member of more than one group, it’s possible that the same app or configuration may be associated with that user’s devices. For example, the user may be a member of a Staff group and also a member of the Marketing group. If the same app is in different Blueprints for both groups, the user gets only one app and only a single app license is used.
Conflicting configurations
There are two cases where you might get conflicting configurations:
You’ve attempted to add a configuration to a Blueprint that already contains another configuration. You’re asked to resolve which configuration to proceed with before updating the Blueprint. For example, if one Blueprint has the firewall turned on and the other Blueprint has the firewall turned off, you’re shown the conflict and asked to resolve it before the Blueprint can be applied.
You’ve created more than one configuration that supports only one per device. In this case, you’re asked to prioritize them before you can save the additional configuration. If a device is assigned multiple Blueprints and their configurations conflict, the prioritization decides which configuration is installed on the device.
Combined configurations
If a Blueprint has a configuration for a device that adds content to the device—for example, if one Blueprint has a Wi-Fi configuration and another Blueprint has a different Wi-Fi configuration—then the user’s device sees both Wi-Fi networks.
This same Blueprint behavior applies if a single user is assigned more than one Blueprint with duplicate apps or with conflicting or combined configurations.
Create and assign a Blueprint
In Apple Business, sign in with a user whose role has permissions to manage Blueprints.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose Devices > Blueprints.
Select Add
to add a new Blueprint.Choose your Blueprint for one of the following:
Blueprints for users: Manage user devices with recommended defaults.
Blueprints for service devices: Set up service devices like conference rooms or kiosks.
Create your own Blueprint: Customize devices for specific requirements.
Select Continue.
Do any of the following:
Set up the default configurations and, if necessary, add more.
Add apps.
Add user groups or users.
See How to search.
Select Add Blueprint.
Note: If you don’t have enough licenses for the number of users or devices in the Blueprint, you need to obtain additional licenses for the app or apps to be assigned.
Edit a Blueprint
In Apple Business, sign in with a user whose role has permissions to manage Blueprints.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose Devices > Blueprints.
Search for, then select, the Blueprint you want to edit. See How to search.
If necessary, do any of the following:
Select Edit
, enter a new name, then select Update.Select People to add or remove user groups or users.
Select Devices to add or remove devices.
Select Configurations to add or remove configurations.
Select Apps to add or remove apps.
Select Save.
Delete a Blueprint
When you delete a Blueprint, all apps associated with that Blueprint are removed and all configurations are returned to their default state on all devices assigned directly or enrolled by assigned users or members of user groups.
In Apple Business, sign in with a user whose role has permissions to manage Blueprints.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose Devices > Blueprints.
Search for, then select, the Blueprint you want to delete. See How to search.
You can select more than one Blueprint.
Select Delete.
If you still want to remove the Blueprint, select “I understand that this cannot be undone,” then select Confirm.