Do you need Apple Business Manager?
What Apple Business Manager is for, what Automated Device Enrollment gets you, and the honest answer for a family with two Macs already sitting on a desk.
Technical8 min read
Apple Business Manager comes up constantly in discussions of Mac management, usually stated as a prerequisite. It is not, quite. It is a powerful thing to have and unnecessary for a good many deployments, and knowing which situation you are in saves a lot of wasted effort.
What it actually is
Apple Business Manager is a web portal where an organization holds its relationship with Apple in one place. It is free. Its three main jobs are:
- Device assignment. Devices your organization owns can be associated with your account and automatically directed to your management server when they are set up.
- Managed Apple Accounts. Organization-controlled accounts for people in your organization, distinct from their personal Apple Accounts.
- App and book distribution. Buying licenses in volume and assigning them to devices or users, retaining the licenses when someone leaves.
Apple Business Manager is not itself a management server. It does not push configuration or apply policy. You still need an MDM service; Apple Business Manager is the layer that tells devices which MDM service to report to and holds your app licenses.
Automated Device Enrollment is the real prize
The capability worth the setup effort is Automated Device Enrollment. When a device is assigned to your organization and Automated Device Enrollment is configured, a freshly set-up Mac contacts Apple during Setup Assistant, learns it belongs to your organization, and enrolls into your management server automatically.
Two consequences matter for accountability work:
- The device can come out supervised, unlocking non-removable management and the stronger restriction set.
- Enrollment can be made mandatory during setup, so erasing the Mac and starting over does not escape management — the fresh install enrolls again.
That second point is the closest thing to a genuinely durable configuration available on Apple hardware, and it is the reason organizations with real compliance requirements go this route.
Do you need it?
Probably yes, if you are an organization
A church, school, or ministry buying Macs for staff or shared use should set this up. You are already an organization, you are buying devices anyway, and enrolling purchases at the point of sale is far easier than retrofitting management later. The app licensing alone often justifies it.
Probably not, if you are a family with Macs you already own
This is where a lot of guidance leads people astray. Apple Business Manager is designed around organizational device ownership. A household with two Macs bought from a retailer three years ago is not really the intended case, and the effort to retrofit it is substantial.
Those Macs can still be enrolled in an MDM service directly, and they can still be supervised using Apple Configurator. You get most of the practical benefit without establishing organizational infrastructure around a family of four.
Worth revisiting when you next buy hardware
The calculus changes at purchase time. If you know you want managed devices and you are buying anyway, purchasing through a channel that supports device assignment costs nothing extra and saves the erase-and-reprepare dance entirely.
What enrollment in the programme involves
Apple verifies organizations before granting an account. Expect to supply your legal business name and address, identify a person with authority to agree to terms on the organization's behalf, and provide contact details Apple can verify. Apple has adjusted its verification requirements over time, so check the current requirements at enrollment rather than relying on older write-ups.
The practical advice, whatever the current specifics: keep your details consistent. The legal name, address, and contact information you provide should match your business registration and your public web presence exactly. Most delays come from mismatches between what an organization submits and what a reviewer can independently confirm, not from any single missing document.
A reasonable decision path
- Organization buying devices? Set up Apple Business Manager and use Automated Device Enrollment. This is the intended path and the least painful long term.
- Family with existing hardware? Enroll directly in an MDM service. Add supervision via Apple Configurator if and when the stakes justify erasing and re-preparing the machine.
- Buying a Mac soon? Decide before you buy. It is the one moment when the stronger path is nearly free.
Do not let the absence of Apple Business Manager stop you from doing anything. A well-configured unsupervised Mac with system-wide filtering, an application allowlist, and removal alerting is a large improvement over an unmanaged one, and you can start there this week.
Keep reading
What Mobile Device Management actually is
The plain-English version of how Apple's management framework works, what a configuration profile is, and why it behaves differently from an app you install.
FoundationsWhy content filters get removed, and what stops it
Supervision is the single technical difference between a filter that can be uninstalled in thirty seconds and one that cannot. Here is what it is and how a device gets it.
Something unclear, or something wrong?
Questions and corrections are both welcome. Apple changes its platforms constantly, and no write-up stays accurate on its own.