Manage BYOD with Apple User Enrollment

What User Enrollment is

Apple User Enrollment is the privacy-focused enrollment method for personally owned devices. FileWave can manage the organization's accounts, settings, managed apps, and managed data without gaining the broader controls available on an organization-owned supervised device. The user keeps control of the personal Apple Account and personal data. When management is removed, the organization can remove its managed data without erasing the person's entire device.

When to use it

Use User Enrollment when the person owns the device but needs organization-managed apps, accounts, or access settings. It fits a BYOD policy where IT is responsible for work resources, not for the whole device. Do not choose it when the organization needs supervision-only restrictions, full-device erase, or inventory of personal apps and hardware identifiers. For an organization-owned device, compare Automated Device Enrollment or another Device Enrollment method instead of weakening the required management outcome to fit BYOD.

• Apps and Books licenses can deliver managed apps through the user's Managed Apple Account.
• For User Enrollment, FileWave automatically registers and associates the Apps and Books user when targeted licensed content requires it.
• Supported configuration profiles can provide organization settings such as managed accounts and per-app VPN.

But there are also restrictions to management:

• No inventory of unique hardware identifiers such as the serial number, UDID, IMEI, or MAC address
• No access to personal accounts, messages, browsing history, or other personal data
• No inventory or takeover of personal apps
• No full-device remote erase, supervision-only commands, or supervision-only profiles
• Only the payloads and restrictions Apple permits for User Enrollment

How

After enrollment, use Deployments to target supported profiles and licensed content. Build a separate BYOD test group rather than reusing a supervised-device Deployment whose payloads may be unavailable. Verify installation, managed-data removal, and user-facing prompts on a pilot device because Apple intentionally limits the commands, inventory fields, payloads, and restrictions available to User Enrollment.

Apps and Books user registration. You do not need to pre-create and invite each licensing user in FileWave. For User Enrollment, FileWave registers and associates the user on demand when targeted licensed content requires it.