Business architecture

Main roles

• Administrator: manages organizations, users, certificates, policies and global device inventory.
• Operator or customer: manages the devices assigned to their organization within the granted quota.
• Apple Business Manager: provides organization identity and automated enrollment.
• MDM service: stores policies, creates commands and receives device status.
• Supervised device: applies approved configuration and reports execution status.

Command lifecycle

An operator creates a command in the console. The service validates permissions and device state, queues the command, sends an Apple push notification, and waits for the device to report execution. Pending, failed and completed states should be visible in the audit trail.

Certificate relationship

ABM handles enrollment and organization ownership. The MDM certificate authorizes management. APNs transports the wake-up notification. A failure in any one of these services can affect the final device result.

Read the full 中文业务架构说明.