We value your privacy

We use cookies to analyse site traffic and improve your experience. You can accept all cookies or reject non-essential ones. See our Privacy Policy for details.

GR IT SERVICES
  • Contact
Get a quote
  2. Apple
  3. Apple School Manager
Apple School Manager, UAE

Apple School Manager is the layer underneath everything else, and it was not affected by the Apple Business changes.

Every Apple device programme in a school sits on top of an Apple School Manager account. It holds your Managed Apple Accounts for staff and students, your device registrations, your class rosters and your app and book licences, and whichever MDM you choose connects to it. It is free. It was not part of the April 2026 consolidation that replaced Apple Business Manager on the corporate side, which is a point of confusion we have corrected for several UAE schools this year. This page covers what it does, how to set it up properly, and what goes wrong.

Book an education account reviewSee what it does
Apple School Manager setup and administration for UAE schools
  • FreeNo licence cost to the school
  • UnaffectedNot part of the Apple Business change
  • SIS syncClasses from your school system
  • Shared iPadPersonal experience on a shared device
What the account holds

Eight things Apple School Manager does that nothing else can.

This is not a management platform and it does not compete with one. It is the layer every education MDM plugs into, and the parts of a school Apple programme that cannot work without it are the parts that matter most.

Managed Apple Accounts for staff and students

Organisation-owned Apple identities that belong to the school rather than to the individual. This is what separates a student school identity from whatever personal account they use at home, and it is what allows the school to retain control of work created on school devices. Without it, students sign in with personal accounts and the school has no meaningful claim over anything on the device.

Synchronisation from your school information system

Apple supports syncing user accounts from a Student Information System, from Google Workspace, from Microsoft Entra ID or from another identity provider. For a UAE school this is the difference between maintaining class lists twice and maintaining them once. It also means a student who changes class in the school system changes class on the devices, which is what stops September becoming a week of manual correction.

Federated authentication with your existing directory

Where a school already runs Microsoft 365 or Google Workspace, staff and students can sign in to Apple services with the credentials they already have rather than holding a second password. This reduces support load immediately and, more importantly, it means disabling a leaving student or a departing teacher in one place takes effect across the Apple estate rather than being a separate task somebody forgets.

Shared iPad, so one device serves a whole class

Shared iPad gives each student their own sign-in, their own documents and their own settings on a device shared with others, rather than one generic account everybody uses. For a school running trolleys rather than one-to-one this is the single most valuable capability in the account, because it restores individual work and individual accountability to a shared device.

Classes and roles that reflect the actual school

The account holds classes, instructors and students, and it distinguishes administrative roles so that a network manager, a technician, a head of year and a librarian do not all have the same access. This structure is what the classroom applications and Schoolwork build on, and getting it right at the start avoids a rebuild later when somebody realises the class data does not match the timetable.

Apps and Books bought in bulk and assigned

The school buys licences once and assigns them to devices or to people, then recovers and reassigns them when a student leaves or moves up a year. The licences belong to the institution rather than to an individual account. Note that the education side still uses the term Apps and Books, unlike the business side which renamed it, so documentation written for a corporate audience will not match what you see.

Device registration and zero-touch enrolment

Devices bought through a reseller able to register them to your school appear in the account automatically and configure themselves on first power-on. This is what makes deploying four hundred iPads over a summer break possible with a small team, and it is decided entirely at the point of purchase rather than in any console afterwards.

Recovery when a device comes back

A school device attached to a student personal Apple account can become genuinely unusable when they leave, because the account holder controls it. Organisation-owned identities and organisation-registered devices avoid that entirely. Every school we work with has a small collection of devices in a cupboard that nobody can unlock, and it is always this.

A correction worth reading

The Apple Business changes did not apply to schools.

In April 2026 Apple consolidated Apple Business Manager, Apple Business Essentials and Apple Business Connect into a single platform called Apple Business. Several UAE schools read about it and assumed the same had happened to them. It had not.

  • Apple School Manager was not part of that consolidation and continues as the education service. Your account, your classes, your Managed Apple Accounts and the way you administer them are unchanged by anything that happened on the business side.
  • One genuine overlap is terminology: what used to be called Managed Apple IDs are now Managed Apple Accounts on both sides. If your school policies and onboarding documents still use the old term, they are out of date, and a new technician following them will be looking for something that no longer appears in Apple documentation.
  • One difference to watch is that the business side renamed Apps and Books to Get Apps and Get Books. The education side did not. So corporate-oriented guidance you find online may describe menu items that do not exist in your console, which is a small thing that wastes a surprising amount of time.
  • The practical action for a UAE school is therefore narrow: do not run a migration, because there is nothing to migrate. Update the terminology in your documentation, verify your administrators are still people who work at the school, and carry on. If somebody has proposed a migration project to you on the back of the Apple Business news, ask them which Apple documentation says so.
Ask us to verify your account
Why bring us in

Four reasons schools ask us to look at this.

The account is free and the setup is documented, so a capable school technician can absolutely do this. What we add is having done it enough times to know which decisions are difficult to reverse.

We work to the school calendar

Account restructuring, sync changes and class rebuilds belong in a holiday, not in week three of term. We plan backwards from the first day and we will tell you honestly when something should wait until the next break rather than being attempted now. A change that disrupts a live timetable costs far more than it saves.

We separate what is genuinely required from what is fashionable

Schools receive a lot of advice about Apple deployment, some of it from suppliers with something to sell. We work from Apple published documentation and we tell you which parts of a proposal are actually necessary. The Apple Business consolidation is a live example: several schools were told they needed a migration project, and they did not.

We think about the data protection position, not only the technology

A school account holds identities for children, which carries obligations and, just as importantly, parental expectations. We document what the account holds, how long it holds it, and how a leaving student is handled, so that when a parent or an inspector asks, the answer exists in writing rather than being reconstructed under pressure.

We are available when a lesson is waiting

Account problems in a school are rarely convenient. A sign-in failure during a lesson has thirty people waiting for it. Our tiers are P1 within 5 minutes, P2 within 10, P3 within 30, and schools get a named contact who already knows how the account and the class structure are built.

Where this applies

Six UAE education settings and what each needs from the account.

The account is the same everywhere. What differs is which of its capabilities carry the weight, and that changes considerably between a nursery and a university.

A KHDA-regulated private school in Dubai

The full set: identities for staff and students, sync from the school information system so class data stays current, Shared iPad or one-to-one depending on the programme, and licence management that recovers app purchases when students leave. Reporting matters here too, because inspection questions about technology use are answered far better from current data than from recollection.

An ADEK-licensed school in Abu Dhabi

The same account requirements with generally larger campuses, which usually means more device registration to reconcile and more administrative roles to delegate properly. Bigger schools also tend to have longer purchasing histories across more suppliers, so the device reconciliation stage takes longer and finds more.

A school running Shared iPad on trolleys

This is where the account earns its keep most visibly. Shared iPad turns a device that would otherwise carry one anonymous account into something where each pupil signs in as themselves, keeps their own work, and can be held accountable for what happens under their name. Configuring it properly needs the class and user data to be accurate, which brings the sync quality back into focus.

A nursery or early years setting

Small, simple, and mostly about devices resetting cleanly between uses rather than about identity. The account still matters because it is what makes devices school-owned and recoverable, but the sophisticated capabilities are not needed and we would not set them up. Simplicity here is the correct answer, not a compromise.

A training institute or vocational centre

High learner turnover on short courses, which makes the joiner and leaver mechanics the whole game. Accounts created and removed frequently, licences recovered reliably between cohorts, and devices rebuilt quickly. An account that is not kept accurate here degrades within two or three cohorts rather than over years.

A university or a school group with several campuses

Multiple sites, delegated administration and often a mix of school-owned and student-owned devices. The important work is role structure, so that each campus can administer its own devices without being able to affect another, and a clear position on which devices the institution owns and which it merely supports. Getting that boundary wrong causes more problems than any technical issue.

Three states of a school Apple account

What we find when we review a UAE school account.

The middle column is the norm. The account exists, it was set up correctly once by somebody who has since left, and nothing has been maintained since. It works until the moment it needs to be accurate.
Devices enrol themselves on delivery
Set up and maintained
Set up once, then leftFor newer purchases
No account
Classes match the actual timetable
Set up and maintained
Set up once, then left
No accountNot applicable
Two or more current administrators
Set up and maintained
Set up once, then leftOften not
No account
Leavers removed and licences reclaimed
Set up and maintained
Set up once, then left
No accountNot applicable
Staff and students use one password
Set up and maintained
Set up once, then leftRarely
No account
Shared iPad gives each pupil their own space
Set up and maintained
Set up once, then leftSometimes
No account
Returned devices can be reused
Set up and maintained
Set up once, then leftMostly
No accountOften not
Student data position documented
Set up and maintained
Set up once, then left
No account
September starts calmly
Set up and maintained
Set up once, then leftRarely
No accountNo
Typical position in UAE schools
Set up and maintainedUncommon
Set up once, then leftThe default
No accountSmaller settings
Feature
Set up and maintained
Set up once, then left
No account
Devices enrol themselves on delivery
For newer purchases
Classes match the actual timetable
Not applicable
Two or more current administrators
Often not
Leavers removed and licences reclaimed
Not applicable
Staff and students use one password
Rarely
Shared iPad gives each pupil their own space
Sometimes
Returned devices can be reused
MostlyOften not
Student data position documented
September starts calmly
RarelyNo
Typical position in UAE schools
UncommonThe defaultSmaller settings
Account layer against management layer

What Apple School Manager does, and what your MDM does.

These are constantly confused, and the confusion causes schools to buy an MDM expecting it to do things only the account can do, or to set up an account and wonder why nothing is being enforced. You need both. They do different jobs.
Apple School ManagerEducation MDM
Holds organisation-owned identitiesYesNo
Registers devices as school-ownedYesNo
Buys and holds app and book licencesYesAssigns them
Syncs classes from your school systemYesConsumes them
Enables Shared iPadYesConfigures it
Enforces restrictions and settingsNoYes
Applies content filteringNoYes
Gives teachers classroom controlsNoYes
Locates, locks or wipes a lost deviceNoYes
Costs the school anythingNoYes, licensed
Can be skippedNoOnly for very small deployments
How we work on it

Five steps, sized to a school rather than to a corporate rollout.

Whether this is a new account or a review of an existing one, the sequence is the same. For a school with an existing account, steps one and two frequently find the real issues.
  1. 1

    Verify the account and who controls it

    Administrators, contact addresses, reseller links and management service connections. We are specifically looking for the account whose only administrator left two years ago, which is the most common serious finding and the one that is hardest to resolve in a hurry.

  2. 2

    Reconcile devices and identities against reality

    What the account holds against what is actually in classrooms and staff rooms. The gap is usually devices bought outside the enrolment route, plus accounts belonging to students and staff who have left. Both are quiet problems that only become loud at inspection or at renewal.

  3. 3

    Fix the sync so class data maintains itself

    Connect or repair the link to your school information system, Microsoft Entra ID or Google Workspace so classes, instructors and students stay current without manual work. This is the change that most reliably makes the following September calmer, which is the outcome schools actually want.

  4. 4

    Set up the capabilities that suit your programme

    Shared iPad where devices are shared, federated authentication so people have one password, roles delegated to match your actual staff structure, and licence assignment built around year groups rather than individuals. We deliberately do not enable things you will not use.

  5. 5

    Document it, and agree what happens each year

    A short written record of how the account is structured, what data it holds, how joiners and leavers are handled, and who does what. Plus a fixed point in the year, usually in the summer, when the account is re-checked. Drift is guaranteed, and catching it deliberately costs a fraction of discovering it.

“We had been told we needed a migration because of the Apple Business announcement. They checked, told us in twenty minutes that it did not apply to schools at all, and then found that our only account administrator had left in 2024 and our class sync had stopped working the previous term. The thing we were worried about was not the problem.”
Head of IT
Private school group, Dubai · Client reference available on request
Straight answers

What UAE schools ask about the account layer.

No. The April 2026 consolidation brought together Apple Business Manager, Apple Business Essentials and Apple Business Connect on the corporate side. Apple School Manager was not part of it and continues as the education service. This has caused genuine confusion in UAE schools, because the business-side news was widely reported and it is reasonable to assume the same applied to education. It did not, there is no migration to run, and if a supplier has proposed one on those grounds it is worth asking which Apple documentation supports it.

No, the account is free. What costs money is the management platform you connect to it, if you use a third-party one, and the apps and books you buy through it. This surprises schools that have been quoted for an Apple deployment where the account setup was itemised as a significant cost. Setting it up properly takes skilled time, which is legitimate to charge for, but the account itself is not a licensed product.

For anything beyond a handful of devices, yes, and the distinction matters. Apple School Manager holds identities, device registrations, classes and licences. It does not enforce restrictions, apply content filtering, give teachers classroom controls, or locate and lock a lost device. Those are management platform functions. A school with an account and no MDM has ownership and identity but no enforcement, which is half a deployment.

Shared iPad lets several students use one device while each signs in as themselves, keeping their own documents and settings. If you run device trolleys rather than one-to-one, it is the most valuable thing in the account, because the alternative is one generic account where nobody owns anything and nothing can be attributed to anyone. If every pupil has their own assigned device, you do not need it. The decision follows your device model, not the other way round.

Yes. Apple supports syncing user accounts from a Student Information System, from Google Workspace, from Microsoft Entra ID or from another identity provider. This is the highest-value configuration change available to most schools, because it means class data maintains itself. Without it, somebody rebuilds class structures manually each year and the devices drift out of step with the timetable as soon as any student changes set.

Organisation-owned Apple identities for staff and students, previously called Managed Apple IDs. The rename applies on the education side as well as the business side, so documentation using the old term is out of date. The concept is unchanged: the account belongs to the school, not to the individual, which is what allows the school to control access to work created on school devices and to disable an identity when somebody leaves.

Yes, through federated authentication with the directory you already run, which for UAE schools is usually Microsoft 365 or Google Workspace. The benefit is immediate on support load, because password confusion between two systems is a large share of school IT tickets. The more significant benefit is on leaving: disabling somebody in your directory takes effect across the Apple estate rather than being a separate task that gets forgotten until an audit.

That is a decision you need to make deliberately and write down, because Apple will not make it for you. Typically an account is disabled promptly on leaving and removed after a defined period, with any work the school needs retained beforehand. The reason to decide in advance is that a parent will eventually ask what happened to their child data, and an answer that exists in a documented retention position is a much better answer than one constructed on the spot.

This is the single most common serious finding we make, and it is recoverable but tedious. Recovery goes through Apple support and requires proving that you are authorised to act for the institution, which takes time and documentation. The lesson is preventive: every school account should have at least two current administrators and a contact address that is a role rather than a person, so that a resignation does not become an access crisis. We set that up on every engagement.

They can be added using Apple Configurator, which supports iPhone, iPad and Mac among other devices, and they will become supervised and enrolled. The difference is that Apple provides a 30-day provisional period during which the device can be released from your organisation, supervision and management. For school-owned devices in a controlled environment this is often acceptable. It is still weaker than buying through a reseller who registers devices to your school, which is what we would recommend for everything from now on.

Indirectly but genuinely. An account with accurate class data, current identities and a clear ownership position means you can answer questions about technology use and device management from real data quickly. Inspection is not going to ask about Apple School Manager by name, but it will ask about how technology supports learning and how the school safeguards students, and having the underlying data straight makes those answers concrete rather than general.

The UAE Personal Data Protection Law applies to personal data, and data about children carries higher expectations in practice from both regulators and parents. For a school account the practical requirements are knowing what personal data the account holds, how long it is retained, who can access it, and being able to explain that clearly. Schools in free zones should also check whether their zone has its own regime alongside the federal law. We document this position as part of any account work rather than leaving it to be reconstructed later.

Yes, through role-based administration, and for a school group this is worth setting up properly at the start. The objective is that each campus can manage its own devices and users without being able to affect another campus, while a central team retains oversight. Getting this boundary wrong in either direction causes problems: too tight and every small change needs the central team, too loose and one campus can disrupt another accidentally.

The account itself can be created quickly, but verification of the institution by Apple takes time and cannot be rushed, so start earlier than you think you need to. Beyond that, the work that takes real effort is the sync configuration, the class structure and the device reconciliation, which for a typical school is a matter of days rather than weeks. The genuine constraint is the school calendar: structural work belongs in a break.

It is the most common situation we find and it is usually fixable in a single engagement. What we expect to find is a departed administrator, a sync that stopped working at some point, accounts for students who left years ago, app licences still assigned to them, and devices in classrooms that were never registered. None of these is difficult individually. The value is in doing them together and then agreeing a fixed annual point at which the account gets checked, so it does not silently drift again.
Account health check

Fifteen checks on an Apple School Manager account.

We run this on every school engagement. The first group finds the things that will hurt you at the worst moment. The second is the data quality that decides whether September is calm. The third is what an inspection or a data protection question will reach for.

The things that hurt later

  • Are there at least two administrators, both currently employed?
    A single administrator who leaves is the worst-case scenario here.
  • Is the account contact address a role rather than a person?
    Personal addresses break when that person leaves.
  • Is your reseller still linked and registering devices to the school?
    Zero-touch depends on this and nothing else.
  • Are there devices in daily use that are not in the account?
    Usually retail purchases made during a rush. Always more than expected.
  • Can you recover a device returned by a leaving student?
    The cupboard of unusable iPads is a symptom of getting this wrong.

Data quality that decides September

  • Is your SIS or directory sync actually running and current?
    A sync that failed quietly in June surfaces in September.
  • Do classes in the account match the real timetable?
    They drift every year unless something keeps them aligned.
  • Have leavers been removed and their licences reclaimed?
    Schools commonly carry years of licences held by former students.
  • Are instructors correctly assigned to their classes?
    Classroom tools depend on this being accurate.
  • Is federated authentication configured, or a clear reason it is not?
    Two passwords per person is a support cost you are choosing to pay.

What you will be asked about

  • Do you know what student data the account holds?
    Required for any serious data protection conversation.
  • Is there a documented retention position for student accounts?
    How long after a student leaves does their account persist.
  • Have parents been informed appropriately about school-managed accounts?
    Especially where devices go home.
  • Can you evidence which devices are school-owned?
    Basic, and surprisingly hard for schools that mixed purchasing routes.
  • Does your documentation use current Apple terminology?
    Managed Apple Accounts, not Managed Apple IDs.
Related reading

The layers around this one.

Jamf School for UAE schools

The management platform that sits on top of this account: classroom controls for teachers, a parent app, filtering that follows the device home, and how it compares with Jamf Pro and Intune for education.

Learn more

Zero-touch deployment

How devices get from a purchase order to a working classroom without a technician unboxing each one, and the purchasing rule the whole chain depends on.

Learn more

Apple device management in Dubai

The wider picture across corporate and education Apple estates, including the platform choice and the operational disciplines that keep an estate managed.

Learn more
Next step

Most school accounts have not been looked at in years.

A review is short, it is not disruptive, and it reliably finds the two or three things that would have caused a problem at the worst possible moment. If your account is healthy we will tell you that and leave it alone. If it is not, better to know in a holiday than in week two of term.

Book an education account reviewCall +971 56 613 2743

Related Services

Explore more solutions that work great with this service

Jamf School UAE

Apple device management built for schools and classrooms

Learn more

Apple Device Management

Mac and iPhone fleets, encryption, patching and the September cycle

Learn more

Zero-Touch Deployment UAE

Sealed box to working device without IT touching it

Learn more

MDM Solutions Dubai

Device management across Windows, Apple and Android

Learn more

Microsoft Intune

Device management and endpoint security

Learn more

UAE PDPL Compliance

Federal Decree-Law 45 of 2021 readiness and operations

Learn more

Managed IT Services

Complete outsourced IT department

Learn more
GR IT SERVICES

Leading IT services provider in Dubai,
delivering enterprise-grade solutions
for businesses across the UAE.

Microsoft CSP PartnerCISGuard

Get the Helpdesk app

Raise and track IT tickets from your phone.

Download on the App StoreGet it on Google Play
Learn more about the app

Microsoft 365

  • Microsoft 365 Administration
  • M365 Reporting & Auditing
  • Microsoft 365 Licensing
  • Microsoft Copilot
  • Microsoft 365 Apps
  • Windows 365 Cloud PC
  • Microsoft SharePoint
  • Outlook & Exchange

Security

  • Microsoft Defender
  • Microsoft Purview
  • Microsoft Intune
  • Microsoft Entra
  • Compliance Manager
  • Cybersecurity Audits
  • Copilot for Security
  • Microsoft Sentinel
  • Microsoft Priva

Infrastructure

  • Google Workspace
  • Cloud Migration Services
  • Data Analytics & BI
  • Active Directory
  • Server Management
  • Apple Business
  • Apple Jamf Pro
  • IP Telephone
  • Data Backup
  • Website Development

IT Services

  • Managed IT Services
  • IT Support Dubai
  • IT AMC Dubai
  • New Office IT Setup
  • IT Relocation
  • Remote IT Support
  • On-Call IT Support
  • Startup IT Business Kit
  • Disaster Recovery & BC

Company

  • About Us
  • Careers
  • Contact
  • Blog

Contact

  • Iris Bay Tower, Office 903,
    Business Bay, Dubai, UAE
  • +971 56 613 2743
  • hello@gritservices.ae
  • gritservices.ae

© 2026 GR IT Services. All rights reserved.

Privacy PolicyTerms of UseCookie Policy