Manage content tokens in Apple Business
Overview
External device management services assign content to devices or users by communicating with Apple Business. For your service to link and communicate, a content token is required. Contact your developer for specific information about installing the token in your service.
If you need to migrate legacy user-based tokens, see Migrate content tokens.
Important: If your organization uploaded a content token to an external device management service and you want to use the built-in device management service, you need to remove that token to avoid inconsistencies in app license inventory and app assignment failures. This applies to the original organization only, not to any organizational units.
When does a content token become invalid?
Content tokens become invalid:
One year after they’re created.
When the password is changed for the Managed Apple Account used to download the existing token.
When a content token is invalid, app and book license communication between Apple Business and your external device management service stops.
To avoid interruption of service, manually create a Managed Apple Account, create a custom role, and assign it only the Assign licenses for Apps and Books permission to download and manage content tokens.
Download a content token
In Apple Business, sign in with a user whose role has permissions to get licenses for apps and books.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose Settings > Payments & Billing.
Select Apps & Books, then select Download to download the content token for one of the device management services.
Use content tokens with external device management services
In Apple Business, another device management service can use content tokens that represent organizational units other than the primary organizational unit. To use a content token with an external device management service:
In Apple Business, sign in with a user whose role has permissions to get licenses for apps and books.
To view roles and permissions, see Intro to roles and permissions.
In your browser, choose Devices > Management Services.
Create an additional organizational unit if one doesn’t already exist. See Add organizational units.
Transfer any licenses you want to use in the new organizational unit. See Transfer licenses to another organizational unit.