
Role privileges in Apple School Manager
In Apple School Manager, each role consists of a set of privileges; if you add or remove a privilege, it affects all accounts that have that role. Student roles have very limited privileges, instructor and manager roles have more, and the administrators have the most. To edit roles, you need to have the appropriate privileges. You’re unable to add a privilege that you yourself don’t have.
View a role
In Apple School Manager
, sign in with an account that has the role of Administrator, Site Manager, or People Manager.
Click Roles in the sidebar, then select a role.
View the role and a list of the privileges associated with it.
Click
to view individuals who hold that role.
Edit a role’s privileges
You can edit the privileges of the following roles:
Site Manager
Manager
Instructor
In Apple School Manager
, sign in with an account that has the role of Administrator.
Click Roles in the sidebar.
Select a role, click
, then do one of the following:
To remove a privilege from a role, deselect its checkbox, then click Save.
To add a privilege, select its checkbox, then click Save.
Basic privileges
Privilege | Administrator | Site Manager | People Manager | Device Enrollment Manager | Content Manager | Manager |
---|---|---|---|---|---|---|
Accept terms and conditions | Always on | Always off | Always off | Always off | Always off | Always off |
Edit privileges for other roles | Always on | Always on | Always on | Always off | Always off | Always off |
Add Apple customer numbers and Reseller IDs | Always on | Always off | Always off | Always off | Always off | Always off |
Set tax status information | Always on | Always off | Always off | Always off | Always off | Always off |
Use managed devices | Always on | Always on | Always on | Always on | Always on | Always on |
Sign in to iCloud.com with a Managed Apple ID | Always on | Always on | Always on | Always on | Always on | Always on |
Use managed apps and books | Always on | Always on | Always on | Always on | Always on | Always on |
Administer AppleSeed for IT | Always on | Off by default | Off by default | Always off | Always off | Always off |
Participate in AppleSeed for IT | Always on | On by default | On by default | On by default | On by default | On by default |
For more information on AppleSeed for IT, see the AppleSeed for IT website.
Configure organization settings, as shown in the following table:
Privilege | Administrator | Site Manager | People Manager | Device Enrollment Manager | Content Manager | Manager |
---|---|---|---|---|---|---|
Configure SIS information | Always on | Always on | Always on | Always off | Always off | Always off |
Configure federated authentication | Always on | Always on | Always on | Always off | Always off | Always off |
Create, edit, and delete locations | Always on | Always on | Always on | Always off | Always off | Always off |
Set the default Managed Apple ID user name format | Always on | Always on | Always on | Always off | Always off | Always off |
Set the default password policy for new students | Always on | Always on | Always on | Always off | Always off | Always off |
People privileges
Manage people privileges as shown in the following table:
Privilege | Administrator | Site Manager | People Manager | Device Enrollment Manager | Content Manager | Manager |
---|---|---|---|---|---|---|
Create, edit, and delete Managed Apple IDs | Always on | On by default | On by default | Always off | Always off | On by default |
Assign roles to users | Always on | On by default | On by default | Always off | Always off | On by default |
Change students’ password policies | Always on | On by default | On by default | Always off | Always off | On by default |
Change account status of users | Always on | On by default | On by default | Always off | Always off | On by default |
Inspect user accounts | Always on | On by default | On by default | Always off | Always off | On by default |
View account inspection log | Always on | On by default | On by default | Always off | Always off | On by default |
Create, edit, and delete classes | Always on | On by default | On by default | Always off | Always off | On by default |
Reset passwords | Always on | On by default | On by default | Always off | Always off | On by default |
Generate verification codes | Always on | On by default | On by default | Always off | Always off | On by default |
Content privileges
Configure content settings, as shown in the following table:
Privilege | Administrator | Site Manager | People Manager | Device Enrollment Manager | Content Manager | Manager |
---|---|---|---|---|---|---|
Buy content | Always on | On by default | Always off | Always off | Always on | Off by default |
View content | Always on | On by default | Always off | Always off | Always on | On by default |
Reassign licenses for apps and hold unassigned licenses for apps | Always on | On by default | Always off | Always off | Always on | On by default |
Note: You can migrate a Volume Purchase Program (VPP)-only account into Apple School Manager.
Device privileges
Manage device settings, as shown in the following table:
Privilege | Administrator | Site Manager | People Manager | Device Enrollment Manager | Content Manager | Manager |
---|---|---|---|---|---|---|
Manage MDM servers | Always on | Always on | Always off | Always on | Always off | Always off |
Add, assign, and remove devices | Always on | Always on | Always off | Always on | Always off | Always off |
Release devices | Always on | Always on | Always off | Always on | Always off | Always off |
Instructor privileges
Configure instructor settings, as shown in the following table:
Privilege | Instructor | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Reset passwords for students and generate verification codes for students | On by default | ||||||||||
Create, edit, and delete classes | Off by default | ||||||||||
Inspect student accounts and view account inspection log | Off by default | ||||||||||
View apps and books | Off by default | ||||||||||
Contribute to organization’s iTunes U public website | On by default | ||||||||||
Buy apps and books | Off by default | ||||||||||
Reassign licenses for apps and hold unassigned licenses for apps | Off by default | ||||||||||
View Student Progress Dashboard | Always on | ||||||||||
Use managed devices | Always on | ||||||||||
Sign in to iCloud.com with a Managed Apple ID | Always on | ||||||||||
Use managed apps and books | Always on | ||||||||||
Participate in AppleSeed for IT | On by default |
Staff privileges
Configure staff settings, as shown in the following table:
Privilege | Staff | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Use managed devices | Always on | ||||||||||
Sign in to iCloud.com with a Managed Apple ID | Always on | ||||||||||
Use managed apps and books | Always on | ||||||||||
Participate in AppleSeed for IT | On by default |
Student privileges
Configure student settings, as shown in the following table:
Privilege | Student | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Use managed devices | Always on | ||||||||||
Sign in to iCloud.com with a Managed Apple ID | Always on | ||||||||||
Use managed apps and books | Always on | ||||||||||
Participate in AppleSeed for IT | Always off |