I've managed to release my app through apple business manager but when generating redemption codes there is no download button showing so I'm unable to get my redemption codes. Is there a certain time before the download button appears?

I’m new to working with Macbooks and need to quickly provision one for a contractor. I need to setup MDM (something like Jamf or Mosyle) on the device. But I don’t have an Apple Business Manager account and won’t be getting one (it’s just one laptop I’m provisioning). From my reading, it seems like the way to do MDM without ABM on a Macbook is as follows: 1. Create an admin account on the Macbook 2. Add the MDM to the Macbook using the admin account 3. Setup the user as a standard user account and manage it with the MDM 4. Never give the user the login for the admin account Am I correct that this is the best way to add and enforce MDM on the device without an ABM account? My understanding is that this method still allows the user to perform a full reset of the device and then do what they want with it. But if they don’t reset the device, is their ability to circumvent the MDM blocked? Any pointers for this situation would be greatly appreciated.

My team developed custom application for a company, and now we are trying to deploy the application to the employee owned devices. We decided to use the Apple Business Manager and some MDM solution for managing the devices. 1.Using the Apple Developer Program is the only way to make the application available on the Apple Business Manager account for further distribution, is this correct? 2.Once the application is distributed, from the Apple Developer Account to the Apple Business Manager, in case there are no updates needed for the application, there is no need to renew the Apple Developer account and pay the fee. Meaning the application will still be available for distribution and using on the Apple Business Manager Account. Is this also correct?

We have begun the processing of syncing Apple Business Manager with our Microsoft Intune instance (all Azure Active Directory accounts) via SCIM. In the logs, for 2 of our accounts, I am given the error "Account Update Not Allowed." This error is not included on this page: https://support.apple.com/en-in/guide/apple-business-manager/apddc1fec242/web , nor is Google bringing up any hits, so I don't know what it means or how to fix it.

I want to enable federation in Apple Business Manager but there are conflicts as there are a lot of accounts already created with work email addresses. If we allow Apple Business Manager to reclaim these addresses will the enter user lose their text messages, phone contacts, etc.? I would prefer them not to create other apple id's as suggested by Apple Business Manager.

I'm sorry if the language in the title is confusing. I struggled to type out what I'm trying to do in one sentence. Hopefully I can provide some context below that will help. 1. My company buys Mac devices from an Apple Reseller so the devices we get are registered to our MDM automatically 2. In order to sign into this device to begin setup, I have to create an Apple ID from Apple Business Manager (ABM) 3. Which then prompts me for a phone number and I enter my own 4. I proceed to install apps, adjust settings, and move apps around for end user 5. Once done, I have to change the phone number on the Apple ID I created from ABM, which involves me reaching out to end user to get the code texted to them to complete the process I want to avoid step 5 essentially. Is there a way for me to do all the other steps and just change the user I login as to the end user's Apple ID I generate and act as it's the first time they're logging in so I don't need to contact the user to change phone numbers and they'll have all the apps and settings that I adjusted before when they login? I know a Device Plan will help with some apps getting pushed when the end user logs in but we have custom apps that need to be installed, with additional commands that need to be executed, and settings adjusted for those specific apps. Please let me know if any further info is needed or if this question is answered elsewhere. Thanks

We just registered the company domain on Apple Business Manager and enabled federation. A lot of co-workers used their work email for iCloud already and are now asked to migrate those "personal" accounts. Clearly those accounts are not personal and the workflow to migrate those accounts is really clunky and confusing. Is there a way to just tell Apple that those accounts should be left alone and just enable SSO on them?

We trying to distribute the custom app using the apple business manager, we purchased the app in the business manager. And we are trying to add the device to the business manager account. We didn't find any documentation on 'How to add the device to the business manager?'. Please guide us through the process of enrolling the device.

For example I've created the app, set distribution method to 'Apple Business Manager' and my app has passed the review. Can I generate redemption code for my own app and share it with somebody?

When I was working for a university they bought me a 2017 iMac Pro to use for work from home, which came with some sort of MDM profile linked to the university. When I left several years later, my boss said I could keep the Mac since it was getting old, any new hires would get a new machine anyway. I used it for a while without changing anything, but the MDM part of the OS was still linked. I understood that it was possible to remove the machine from the network from Apple Business Manager, and this would allow it to be reset, so I asked my old boss. Unfortunately, whoever originally ordered the machine from Apple had left, and they didn't know the info/passwords required. This was hardly a top priority for them so while they said they'd look into it and I chased a couple of times, nothing further happened and I eventually stopped using it. Today I tried to delete my personal information from the machine so I could get rid of it, but since I don't know the firmware password, I can't even factory reset it. I had a “bright” idea to try to remotely erase the machine using Find My from my phone. I hit erase, the machine restarted, and the firmware password field showed up. I restarted the machine from the power button, and my account is still there. When I logged in it connected to the internet and tried to remote-erase again, but that just went back to the firmware password screen. Do I have any options now that don't require a firmware password? To be clear I'm not asking to remove the supervision/MDM profiles, I'm asking to remove my personal information, Apple ID, etc. Then I can hand it over to someone from the university, and if someone wants to use it they will have to go dig out that password (or more likely it will end up properly disposed – a shame for a machine which is still plenty powerful, but hard to get people to jump through hoops for ex-property!).

I am trying to sign in using my managed work Apple ID on an iPhone through the settings under VPN & Device Management. When I input my email address, I get "Sign-In Failed", "Your Apple ID does not support the expected services on this device. Contact your administrator to sign in". I am the MDM administrator, but do not know what this means. I am correctly enrolled into ABM, and my domain is approved. What other steps do I need to take in order to allow such a sign in?

I just wiped my iPad using Apple Configurator 2, and linked it to my MDM which is ManageEngine. I am enrolled in ABM and have purchases enough licences of the app I want to install. I can see the apps in the App Catalog, but they are stuck on "Installing". I constantly get a pop-up saying "This Apple ID cannot be used to make purchases." I have tried using the admin Apple ID instead of a simple employee one, but it does not seem to solve the issue. Is there a change I need to apply to the ManageEngine Profile in order to make it work? Thanks a lot!

How can we distribute custom apps worldwide using redemption codes through Apple Business Manager?

When enrolling in MDM you may get this error if you had previously used the same email address as a non managed id. e.g. example.com was transferred to Apple Business managed ids, now your old my@example.com Apple ID needs to be removed so you can use the managed version.