You can use two types of accounts to administer Apple Deployment Programs: Agent accounts and Admin accounts. Both of these require an Apple ID with two-step verification.
The first time that you enroll in an Apple Deployment Program, you need to create a new Apple ID. Then set up two-step verification for the Apple ID. This Apple ID is the Agent account for the enrollment. After you enroll the first time, you can also use your new Agent account to enroll in the other Apple Deployment Programs that are available in your country or region.
The Device Enrollment Program (DEP) and the Volume Purchase Program (VPP) are Apple Deployment Programs. If you already have an Agent Apple ID that you use for one of these programs, you can use it to enroll in the other program by signing in to deploy.apple.com.
Agents can approve terms and conditions for Apple Deployment Programs, purchase apps in the VPP, manage suppliers and devices in the DEP, and create Admin accounts.
When you create an Admin account, you can choose which program resources the Admin can access. You can set up each Admin to have its own access and capabilities. An Admin can do one or more of the following:
- Make purchases on the VPP store
- Assign devices to a Mobile Device Management (MDM) server
- Create other Admin accounts
Any Admin account that you add to your programs needs to use an email address that isn't currently associated with an Apple ID. Then set up two-step verification.
If you use a Mac, iPhone, iPad, or iPod touch, you can’t use these Admin or Agent accounts with the iTunes Store, App Store, Find My Mac or Find My iPhone.