Okay - so first of all they are called Apple Accounts now whether personal or managed and the truth is, I made up the acronym PAIDs (I think) but MAIDs is a real thing or was a real thing and technically so are PAIDs, I'm just not sure anyone has ever called them that before. Maybe now they are PAA's and MAAs... anyway. We are talking about Apple IDs here and whether you created your Apple ID as a normal human on the web at appleid.apple.com or on your shiny new Apple device OR your IT administrator created it for you in Apple Business Manager (ABM) and provided it to you during onboarding for use within the organization you work for.
What is an Apple Account (Apple ID)?
In the Apple world, the account that controls access to all your Apple-related online services is the Apple ID... now going forward, referred to as an Apple Account. Buying apps from the App Store, subscribing to things, putting photos in iCloud Photos, and sharing data between iCloud-enabled apps—all these actions rely on your Apple Account. If you’re a regular Apple user, you have an Apple Account associated with your email address. This could be your @gmail.com account or one you created with Apple using @mac.com, @me.com or @icloud.com.
Most Apple users set up an Apple Account when they configure their first Apple device, and if you don’t have an email address that you want to use, you can create a free iCloud email address during the process.
Understanding the Key Differences Between Personal Apple Accounts and Managed Apple Accountss
There are actually two types of Apple Accounts: personal Apple Accounts used by individual users and managed Apple Accountss given to employees by businesses and other organizations. Managed Apple Accounts are popular with companies that give devices to staff members and need to ensure compliance with various usage and security policies. There are a few key ways they differ.
Creation, ownership, and control: Individuals set up personal Apple Accounts on their own and maintain full ownership over the account and control over the device. Managed Apple Accounts are set up by the organization, typically through Apple Business Manager, and the organization retains ownership and control for centralized management. That control is essential when an employee leaves. Otherwise, a company may be unable to reset a returned device and give it to another employee.
Access to Apple services: Personal Apple Accounts have full access to all Apple services and features. Managed Apple Accounts have much more limited access to protect the organization from unauthorized purchases and insecure behavior. Users with managed Apple Accounts can’t purchase anything from the App Store, iTunes Store, or Apple Books. Nor can they access Apple Arcade, Apple Fitness+, Apple Music, Apple Music radio, Apple News+, or Apple TV+. The Find My, Health, Home, Journal, and Wallet apps aren’t available or fully functional. Plus, Apple Pay, iCloud Family Sharing, iCloud Mail, and iCloud+ services like Private Relay, Hide My Email, and custom email domains are unavailable.
Security and management: When a device relies on a personal Apple Accounts, that user is responsible for maintaining security and managing apps (which will belong to the user). That’s appropriate for individuals, but for companies that need to protect corporate information, managed Apple Accounts allow the IT department to enhance security by requiring passcodes, enforcing password policies, setting role-based permissions, and separating work and personal data. On the management side, managed Apple Accounts make it easier to reset devices, revoke access, comply with legal and privacy regulations, integrate with corporate identity systems, and centralize app licensing.
Though some organizations may prevent it and many would argue should prevent it, it is technically possible to use both types of Apple Accounts on the same device. For instance, you could use a managed Apple Account on an employer-provided device along with a personal Apple Account to access the App Store, Apple Music, Apple News+, and other Apple services. To do that on an iPhone, you’d go to Settings > Your Name > Media & Purchases and either sign in with your personal Apple Account or, if necessary, tap Sign Out and sign back in.
What’s the takeaway?
There are three possibilities, depending on who owns the device and the employer’s security and management policies:
Personal device not used for work: If you’re a regular user who has purchased your own device and you either don’t use it for work or your employer doesn’t care what you do, all you need is a single personal Apple Account. Although it’s possible to create multiple Apple Account and use them for different purposes, it’s a recipe for confusion down the road.
Personal device used for work: If your employer has a BYOD (Bring Your Own Device) program that lets you use your own device with corporate resources, they will likely ask to use Apple’s User Enrollment to create a profile on the device that separates personal and work data and allows the use of both personal and managed Apple Account. Although the IT department cannot access your personal data (emails, messages, photos, location, etc.), it can enforce security policies, install and configure work-related apps, and control corporate data on the device. Some people find the privacy implications of this approach troubling and opt for separate work and personal devices.
Employer-provided device: If your employer provides a device for your use, they will likely require you to use a managed Apple Account on it. That prevents you from having to worry about security or management, but comes with some restrictions on what you can do. Talk to your IT department if you also want to use your personal Apple Account on the device.
There are many variables that determine whether you should be using Personal or Managed Apple Accounts. If you need any more information or guidance on Apple Accounts, Apple Business Manager or device management, don't hesitate to reach out and schedule time with us!
*It was very difficult to write Apple Account instead of Apple ID
Comments