Apple School Manager

Role privileges in Apple School Manager

Each role consists of a set of privileges; if you add or remove a privilege, it affects all accounts that have that role. Student roles have very limited privileges, instructor and manager roles have more, and the administrators have the most.

Basic privileges

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Accept terms and conditions	Required	Always off	Always off	Always off	Always off	Always off
Edit privileges for other roles	Required	Required	Required	Always off	Always off	Always off
Transfer app and book licenses between locations	Required	Always off	Always off	Always off	Always off	Always off
Add Apple customer numbers and Reseller IDs	Required	Always off	Always off	Always off	Always off	Always off
Set tax status information	Required	Always off	Always off	Always off	Always off	Always off

Configure organization settings, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Configure SIS information	Required	Required	Required	Always off	Always off	Always off
Configure federated authentication	Required	Required	Required	Always off	Always off	Always off
Create, edit, and delete locations	Required	Required	Required	Always off	Always off	Always off
Set the default Managed Apple ID user name format	Required	Required	Required	Always off	Always off	Always off
Set the default password policy for new students	Required	Required	Required	Always off	Always off	Always off

Manage device settings, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Manage MDM servers	Required	Required	Always off	Required	Always off	Always off
Add, assign, and remove devices	Required	Required	Always off	Required	Always off	Always off

Other basic privileges, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Use managed devices	Required	Required	Required	Required	Required	Required
Use managed apps and books	Required	Required	Required	Required	Required	Required
Sign in to iCloud.com with a Managed Apple ID	Required	Required	Required	Required	Required	Required

People privileges

Manage Managed Apple IDs, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Create, edit, and delete Managed Apple IDs	On by default	On by default	On by default	Always off	Always off	On by default
Assign roles to users	On by default	On by default	On by default	Always off	Always off	On by default
Change students’ password policies	On by default	On by default	On by default	Always off	Always off	On by default
Generate AppleCare Support PIN for users	On by default	On by default	On by default	Always off	Always off	On by default
Change account status of users	On by default	On by default	On by default	Always off	Always off	On by default

Perform and view account inspection privileges, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Inspect user accounts	On by default	On by default	On by default	Always off	Always off	On by default
View account inspection log	On by default	On by default	On by default	Always off	Always off	On by default

Privileges for creating, editing, and deleting classes, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Create, edit, and delete classes	On by default	On by default	On by default	Always off	Always off	On by default

Privileges to reset passwords, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Reset passwords	On by default	On by default	On by default	Always off	Always off	On by default
Generate verification codes	On by default	On by default	On by default	Always off	Always off	On by default

Content privileges

Configure content settings, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Buy apps and books	On by default	On by default	Always off	Always off	On by default	Off by default
View apps and books	On by default	On by default	Always off	Always off	On by default	On by default
Contribute to institution’s iTunes U public website	On by default	On by default	Always off	Always off	Always off	On by default
Request, connect, or publish to institution’s iTunes U public site manager	On by default	On by default	Always off	Always off	Always off	On by default

Privileges to manage content, as shown in the following table:

Privilege	Administrator	Site Manager	People Manager	Device Manager	Content Manager	Manager
Reassign licenses for apps and books	On by default	On by default	Always off	Always off	On by default	On by default
Hold unassigned licenses for apps and books	On by default	On by default	Always off	Always off	On by default	On by default

Note: You can migrate a Volume Purchase Program (VPP)-only account into Apple School Manager.

Instructor privileges

Configure instructor settings, as shown in the following table:

Privilege								Instructor
Use managed devices								Required
Sign in to iCloud.com with a Managed Apple ID								Required
Use managed apps and books								Required
Inspect student accounts								On by default
View account inspection log								On by default
Create, edit, and delete classes								Off by default
Reset passwords for students								On by default
Generate verification codes for students								On by default
View apps and books								Off by default
Contribute to institution’s iTunes U public website								On by default

Staff

Configure staff settings, as shown in the following table:

Privilege								Staff
Use managed devices								Required
Sign in to iCloud.com with a Managed Apple ID								Required
Use managed apps and books								Required

Student privileges

Configure student settings, as shown in the following table:

Privilege								Student
Use managed devices								Required
Sign in to iCloud.com with a Managed Apple ID								Required
Use managed apps and books								Required

Helpful?

Apple School Manager User Guide