Once your Apple Enterprise is configured, you can start enrolling your Apple devices in Applivery. Let's take a look at the available enrollment methods.
Enrollment options
Apple provides multiple ways to enroll devices depending on your use case, the type of device ownership (corporate-owned vs. BYOD), and the level of control you need over the device.
All enrollment methods result in the device being managed by Applivery, but they differ in two key aspects:
Supervision: Supervised devices give administrators significantly more control over the device, including restrictions, silent app installation, and advanced configurations. It's generally intended for corporate-owned devices. You can learn more about it here.
Unremovable MDM: Some enrollment methods allow the MDM profile to be locked so the user cannot remove it, ensuring the device always remains managed.
Account-Driven User Enrollment
Designed for BYOD scenarios. The user authenticates with a Managed Apple ID to enroll their personal device. It provides a clear separation between personal and work data, and gives the organization limited visibility over the device — protecting user privacy. The device is not supervised, and the MDM profile can be removed by the user. You can learn more about it here.
Account-Driven Device Enrollment
A newer method (available since iOS 17 and macOS 14) for corporate-owned devices that are not registered in Apple Business Manager. Uses account-driven authentication and provides more management capabilities than User Enrollment. Mac computers enrolled this way are supervised, but iPhone, iPad, and Apple Vision Pro are not. You can learn more about it here.
Profile-Based Device Enrollment
The classic manual enrollment method is typically done by sharing a link or QR code that the user opens in Safari. It does not require Apple Business Manager. Mac computers are supervised upon enrollment, but iPhone, iPad, and Apple TV are not. The MDM profile can be removed by the user. You can learn more about it here.
Automated Device Enrollment (DEP)
The most powerful enrollment method, designed for zero-touch corporate deployments. Devices are registered in Apple Business Manager (ABM) and automatically enroll during initial setup — without any user interaction. All devices are supervised, and the MDM profile cannot be removed by the user, making it the recommended method for organization-owned devices. You can learn more about it here.
Apple Configurator for Mac
Allows enrollment by physically connecting the device to a Mac running Apple Configurator via USB. It enables supervision without requiring Apple Business Manager, though devices enrolled this way have a 30-day provisional period during which the user can still remove the MDM profile. Supports iPhone, iPad, and Apple TV (Ethernet-only models).
Apple Configurator for iPhone
Allows adding iPhone, iPad, Mac (T2 chip or Apple Silicon), and Apple Vision Pro to Apple Business Manager using an iPhone running the Apple Configurator app — without needing a Mac. The device is enrolled by scanning a pairing image during Setup Assistant. Once added to ABM, devices are supervised, though there is a 30-day provisional period during which the user can still release the device from management.
You can learn more about Apple Configurator Enrollment here.
Enrollment methods
Enrollment Method | Supported Devices | Min. OS Version | Supervised? | Unremovable MDM? | Typical Use Case |
|---|---|---|---|---|---|
Account-driven User Enrollment | iPhone, iPad, Mac, Apple Vision Pro | iOS 15, iPadOS 15, macOS 14, visionOS 1.1 | ❌ | ❌ | BYOD |
Account-driven Device Enrollment | iPhone, iPad, Mac, Apple Vision Pro | iOS 17, iPadOS 17, macOS 14, visionOS 1.1 | ❌ (iPhone, iPad, Vision Pro) ✅ (Mac) | ❌ | Corporate-owned, no DEP |
Profile-based Device Enrollment | iPhone, iPad, Mac, Apple TV | iOS 4, iPadOS 13.1, macOS 10.7, tvOS 9 | ❌ (iPhone, iPad, Apple TV) ✅ (Mac) | ❌ | Manual enrollment via link or profile |
Automated Device Enrollment (DEP) | iPhone, iPad, Mac, Apple TV, Apple Watch, Apple Vision Pro | iOS 13, iPadOS 13.1, macOS 10.14.4, tvOS 13, watchOS 10, visionOS 2.0 | ✅ | ✅ | Corporate-owned, zero-touch deployment |
Apple Configurator for Mac | iPhone, iPad, Apple TV (Ethernet only) | macOS (host) | ✅ | ❌ (30-day provisional period) | Add devices to ABM without DEP purchase |
Apple Configurator for iPhone | iPhone (iOS 16+), iPad (iPadOS 16.1+), Mac (macOS 12.0.1+, T2/Apple Silicon), Apple Vision Pro (visionOS 26+) | iOS 16 (host) | ✅ | ❌ (30-day provisional period) | Add devices to ABM without a Mac |