Apple Business Manager profile settings (macOS)
General settings
| Setting | Description |
|---|---|
| Name | The name of the profile. |
| Description | An optional description of the profile. |
| Device group | A device group that will be assigned to devices when they are enrolled with Sophos Mobile. For information on device groups, see Device groups. To simplify device management, we recommend that you use a separate device group for Apple Business Manager devices. |
| Task bundle | A task bundle that will be transferred onto the devices when they are enrolled with Sophos Mobile. The list includes all task bundles that contain no enrollment task. For information on task bundles, see Task bundles. |
Enrollment
| Setting | Description |
|---|---|
| User can skip MDM policy assignment | The user is able to skip the setup step that applies the Sophos Mobile enrollment profile. |
| Assign user to device | During the enrollment process with Sophos Mobile, users are asked for their Sophos Mobile Self Service Portal credentials and then assigned to the device. Use this option to auto-assign a user to the device. |
macOS setup
On the macOS setup tab, you disable configuration steps of the setup assistant that starts when the device is switched on for the first time.
These settings only affect the macOS setup. If you disable a configuration step, the user is still able to enable the relevant option later. To completely disable a feature, use a Restrictions configuration. See Restrictions configuration (macOS device policy) and Restrictions configuration (macOS user policy).
| Setting | Description |
|---|---|
| Apple ID | Skip configuring an Apple ID. The user cannot log in with their Apple ID to access Apple services. |
| Apple Pay | Skip configuring Apple Pay. The user cannot add credit or debit card information for paying in stores or within apps using Apple Pay. |
| FileVault disk encryption | Skip configuring FileVault disk encryption. FileVault is turned off. |
| Terms and Conditions | Skip the Terms and Conditions page. |
| Passcode | Skip creating a passcode to unlock the device. |
| Appearance | Skip configuring the appearance of the user interface (light or dark). |
| Restore from backup | Skip restoring data from a Time Machine backup or performing a system migration. |
| Diagnostics | Skip configuring diagnostics. Diagnostic and usage data are not sent to Apple. |
| Location services | Skip configuring location services. Location services are turned off. |
| Touch ID & Face ID | Skip configuring Touch ID and Face ID. The user cannot set up biometric authentication in place of a passcode. |
| Privacy | Skip the page that explains the Data & Privacy icon. |
| iCloud Drive | Skip activating the automatic upload of files from Documents and Desktop to iCloud Drive. |
| Registration | Skip creating a computer account. |
| iCloud Analytics | Skip configuring iCloud Analytics. Diagnostic and usage data from the iCloud account isn’t sent to Apple. |
| Siri | Skip configuring Siri. Siri is turned off. |
| True Tone | Skip activating True Tone (the automatic adaptation of display colors based on ambient lighting conditions). |
| Display Zoom | Skip configuring Display Zoom, that is a zoomed view providing larger icons, text and buttons. |
Support information
| Setting | Description |
|---|---|
| Department | The department or location name associated with the profile. This name is included in the information that the user can access by clicking About Configuration during device setup. |
| Phone number | The support phone number for your company. This field is pre-populated with the phone number from the technical support contact details. See Configure IT contact. The phone number is stored internally in the profile but is not available to the device user. |
| The support email address for your company. This field is pre-populated with the email address from the technical support contact details. See Configure IT contact. The email address is stored internally in the profile but is not available to the device user. |