Apple @ Work is brought to you exclusively by MosyleA single platform of Apple Unified. Mosyle is the only solution that integrates in a single professional platform all the solutions needed to use, manage, and protect Apple devices smoothly and automatically in the workplace. More than 45,000 organizations trust Mosyle to get millions of Apple devices up and running effortlessly and affordably. Request your extended trial Today and understand why Mosyle is everything you need to work with Apple.
At this year’s WWDC, Apple announced the Apple Extended Business API. This update allows IT administrators to retrieve device information, check audit events and assign or unassign devices directly through the API. It’s a great update for enterprise IT built on Apple and Apple Business, but configuring the API properly can be a little frustrating according to reports from developers.
About Apple @ Work: Bradley Chambers has been an Apple IT administrator since 2009. Through his experience in deploying and managing firewalls, switches, mobile device management systems, enterprise WiFi, 1000s of Macs and 1000s of iPads, Bradley will highlight how Apple IT managers use Apple devices, create networks to share stories from Apple, and train IT users. Its products for the IT department.
Navigating Apple Business Roles
When testing these new APIs, it has been reported that you are likely to encounter a 403 Forbidden error when using the Audit Events API. The API returns a message stating that the API code currently in use does not allow the request.
Apple gives Detailed document For creating an API account in Apple Business. The data access section says that you need permission to access audit events via the Admin API, but it’s not clear how to apply the same permission to your account.
While digging through the official API documentation, you will find some limitations that you should be aware of. Organizations can have up to 50 API accounts and create up to 15 custom roles in Apple Business Manager. All users who can view, edit, and delete roles can change specific permissions for all default roles.
To fix the 403 error, you need to adjust the permissions in your API account. To create or edit custom roles, go to Settings > Roles & Permissions. When creating custom roles, you can rely on existing roles and simply add permissions.
Early Apple business manager roles include IT administrator, marketing administrator, people manager, device registration manager, and content manager. Checking all the individual organization permissions for each role is incredibly tedious.
To solve this exact problem, more people stay AppleShare IT Create a really useful web tool to help guide you. Using Claude, they turned the large Apple start page and authorization document into a simple wizard checklist, 100% value bookmarking.
with Apple business role checkerYou can only verify the specific organizational permissions you need for your API account. The tool then tells you which default roles already cover those permissions. If the default role does not cover everything, it is strongly recommended that you customize the existing role to meet your needs without starting from scratch.
Take 9to5Mac
For example, this web app MacAdmins community Creating tools to help their IT peers while solving their own needs. Apple’s extended Business API will be incredibly powerful for managing and automating large-scale devices.
If you are setting up a new API account and want to avoid the 403 Forbidden error, do yourself a favor and bookmark it. Role check tool website. I love seeing the MacAdins community continue to support each other!
Apple @ Work is brought to you exclusively by MosyleA single platform of Apple Unified. Mosyle is the only solution that integrates in a single professional platform all the solutions needed to use, manage, and protect Apple devices smoothly and automatically in the workplace. More than 45,000 organizations trust Mosyle to get millions of Apple devices up and running effortlessly and affordably. Request your extended trial Today and understand why Mosyle is everything you need to work with Apple.
FTC: We use automatic income affiliate links. More.
