Hi. I had a policy where the restrictions for the App Store were allowed and users could download an App. Now when I click it, it seems to do nothing. I have ticked the boxes to "Allow app installation" and also "Allow app installation from device UI" but it still does not allow it. If I remove the policy then clicking 'get' brings up the "Sign in to complete purchase" but I do not want to give out the AppleID.
Is there something I am missing that is restricted? Or is there a way I can push out the AppleID remotely to all my ipads so that it will auto sign in to the App Store?
Thanks for the reply. They are enrolled with DEP but does that mean there is no policy that will allow certain users to install Apps? Even with the above settings?
The main issue when enrolling devices via DEP is that there is no option for the user to assign an Apple ID to their mobile device. This is why the pop-up is displayed asking for an iTunes account.
In most environments, DEP will be used with VPP so that apps/licenses can be assigned out from the Sophos Central Mobile portal, though Managed Apple IDs can also be used if you wish to allow your end-users to install apps.
Ok thanks. So how do i go about pushing a managed Apple ID to a device?
Some information can be found on the following page regarding Apple User Enrollment and Managed Apple ID's.- https://docs.sophos.com/central/Mobile/help/en-us/AdminHelp/EnrollDevices/AppleUserEnrollment/index.html
Unfortunately, I don't have access to an Apple Business Manager portal to test with, but I suggest checking if it's possible to assign this within ABM. You can find the Apple Business Manager User guide at the following url.- support.apple.com/.../web