> ## Documentation Index
> Fetch the complete documentation index at: https://docs.accessowl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Apple Business Manager

AccessOwl integrates with Apple Business Manager to provision and deprovision users in your Apple Business Manager organization.

<Note>
  Apple replaced Apple Business Manager with Apple Business on April 14, 2026. This page keeps the name Apple Business Manager, the setup is the same for both.
</Note>

## Capabilities

<CardGroup cols={2}>
  <Card title="Provisioning" icon="user-plus">
    AccessOwl creates users in your Apple Business Manager organization with the requested role during access requests.
  </Card>

  <Card title="Deprovisioning" icon="user-minus">
    AccessOwl deactivates users in your Apple Business Manager organization during access revocations.
  </Card>
</CardGroup>

## Prerequisites

* **Organization Administrator** access to your Apple Business Manager organization, so you can add the integration account with the same role.
* Your organization and its domain are verified in Apple Business Manager. Users can only sign in once the organization is verified.

## Setup

<Steps>
  <Step title="Add Apple Business Manager in AccessOwl">
    Either add a new application or open Applications and click the +-symbol, then continue.
  </Step>

  <Step title="Add the integration account as Organization Administrator">
    AccessOwl shows you the integration account's email address. In Apple Business Manager:

    * Go to **People** > **Users** and click **Add**.
    * Enter a first and last name, and use the integration account's email address as the **Email address**.
    * Under **Role**, select **Organization Administrator**.
    * Save, then choose **Share Sign-in Instructions** or **Create Sign-In** to generate the temporary password and send the sign-in instructions to the integration account.

    <Note>
      The integration account needs Organization Administrator because it is the only role that can manage every other role, including other Organization Administrators. An IT Administrator cannot manage Organization Administrators, so requests or revocations for that role would result in a reassignment error.
    </Note>
  </Step>
</Steps>

## FAQ

<AccordionGroup>
  <Accordion title="Are revoked users deleted from Apple Business Manager?">
    No. AccessOwl deactivates the user, which signs them out and blocks sign-in with their Managed Apple Account. Apple deletes a manually created account automatically once it has been deactivated for more than 30 days. To delete it earlier, open the user in **People** > **Users**, click **More** and select **Delete**.
  </Accordion>

  <Accordion title="Does this manage users synced from Google Workspace or Microsoft Entra ID?">
    No. Users that Apple Business Manager syncs from your directory are created and deactivated by that sync. AccessOwl manages the users that are added directly in Apple Business Manager.
  </Accordion>
</AccordionGroup>