Role privileges in Apple School Manager

In Apple School Manager, each role consists of a set of privileges; if you add or remove a privilege, it affects all accounts that have that role. Student roles have very limited privileges, instructor and manager roles have more, and the administrators have the most. To edit roles, you need to have the appropriate privileges. You’re unable to add a privilege that you yourself don’t have.

View a role

In Apple School Manager , sign in with an account that has the role of Administrator, Site Manager, or People Manager.
Click Roles in the sidebar, then select a role.
View the role and a list of the privileges associated with it.
Click to view individuals who hold that role.

Edit a role’s privileges

You can edit the privileges of the following roles:

Site Manager
Manager
Instructor

In Apple School Manager , sign in with an account that has the role of Administrator.
Click Roles in the sidebar.
Select a role, click , then do one of the following:
- To remove a privilege from a role, deselect its checkbox, then click Save.
- To add a privilege, select its checkbox, then click Save.

Basic privileges

Privilege	Administrator	Site Manager	People Manager	Device Enrollment Manager	Content Manager	Manager
Accept terms and conditions	Always on	Always off	Always off	Always off	Always off	Always off
Edit privileges for other roles	Always on	Always on	Always on	Always off	Always off	Always off
Add Apple customer numbers and Reseller IDs	Always on	Always off	Always off	Always off	Always off	Always off
Set tax status information	Always on	Always off	Always off	Always off	Always off	Always off
Use managed devices	Always on	Always on	Always on	Always on	Always on	Always on
Sign in to iCloud.com with a Managed Apple ID	Always on	Always on	Always on	Always on	Always on	Always on
Use managed apps and books	Always on	Always on	Always on	Always on	Always on	Always on
Administer AppleSeed for IT	Always on	Off by default	Off by default	Always off	Always off	Always off
Participate in AppleSeed for IT	Always on	On by default	On by default	On by default	On by default	On by default

For more information on AppleSeed for IT, see the AppleSeed for IT website.

Configure organization settings, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Enrollment Manager	Content Manager	Manager
Configure SIS information	Always on	Always on	Always on	Always off	Always off	Always off
Configure federated authentication	Always on	Always on	Always on	Always off	Always off	Always off
Create, edit, and delete locations	Always on	Always on	Always on	Always off	Always off	Always off
Set the default Managed Apple ID user name format	Always on	Always on	Always on	Always off	Always off	Always off
Set the default password policy for new students	Always on	Always on	Always on	Always off	Always off	Always off

People privileges

Manage people privileges as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Enrollment Manager	Content Manager	Manager
Create, edit, and delete Managed Apple IDs	Always on	On by default	On by default	Always off	Always off	On by default
Assign roles to users	Always on	On by default	On by default	Always off	Always off	On by default
Change students’ password policies	Always on	On by default	On by default	Always off	Always off	On by default
Change account status of users	Always on	On by default	On by default	Always off	Always off	On by default
Inspect user accounts	Always on	On by default	On by default	Always off	Always off	On by default
View account inspection log	Always on	On by default	On by default	Always off	Always off	On by default
Create, edit, and delete classes	Always on	On by default	On by default	Always off	Always off	On by default
Reset passwords	Always on	On by default	On by default	Always off	Always off	On by default
Generate verification codes	Always on	On by default	On by default	Always off	Always off	On by default

Content privileges

Configure content settings, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Enrollment Manager	Content Manager	Manager
Buy content	Always on	On by default	Always off	Always off	Always on	Off by default
View content	Always on	On by default	Always off	Always off	Always on	On by default
Reassign licenses for apps and hold unassigned licenses for apps	Always on	On by default	Always off	Always off	Always on	On by default

Note: You can migrate a Volume Purchase Program (VPP)-only account into Apple School Manager.

Device privileges

Manage device settings, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Enrollment Manager	Content Manager	Manager
Manage MDM servers	Always on	Always on	Always off	Always on	Always off	Always off
Add, assign, and remove devices	Always on	Always on	Always off	Always on	Always off	Always off
Release devices	Always on	Always on	Always off	Always on	Always off	Always off

Instructor privileges

Configure instructor settings, as shown in the following table:

Privilege								Instructor
Reset passwords for students and generate verification codes for students								On by default
Create, edit, and delete classes								Off by default
Inspect student accounts and view account inspection log								Off by default
View apps and books								Off by default
Contribute to organization’s iTunes U public website								On by default
Buy apps and books								Off by default
Reassign licenses for apps and hold unassigned licenses for apps								Off by default
View Student Progress Dashboard								Always on
Use managed devices								Always on
Sign in to iCloud.com with a Managed Apple ID								Always on
Use managed apps and books								Always on
Participate in AppleSeed for IT								On by default

Staff privileges

Configure staff settings, as shown in the following table:

Privilege								Staff
Use managed devices								Always on
Sign in to iCloud.com with a Managed Apple ID								Always on
Use managed apps and books								Always on
Participate in AppleSeed for IT								On by default

Student privileges

Configure student settings, as shown in the following table:

Privilege								Student
Use managed devices								Always on
Sign in to iCloud.com with a Managed Apple ID								Always on
Use managed apps and books								Always on
Participate in AppleSeed for IT								Always off

Helpful?

Apple School Manager User Guide