MDM controls

The MDM controls activation type enables the management of macOS devices using IT policies, BlackBerry UEM profiles, and device commands. UEM also supports the distribution and management of public Apple VPP apps and internal macOS (.pkg) apps. Both app types are installed as work apps on devices.

macOS devices can be activated using BlackBerry UEM Self-Service or using Apple Automated Device Enrollment (ADE). Apple ADE is the recommended activation method as it supports the latest UEM features, including the ability to create a local administrator account on the device during the UEM activation process.

When a user activates a macOS device, the device and the user are set up as separate entities on UEM. Separate communication channels are established between UEM and the device and UEM and the user account, allowing you to manage the device and the user separately. Some profiles are assigned to the user only (for example, email profiles). Some profiles are assigned to the device only (for example, proxy profiles). Some profiles allow you to choose whether to apply the profile to the device or the user (for example, Wi-Fi profiles).