Intro to content distribution for Apple devices
The most scalable way to distribute apps and books is to purchase them in volume through the Apps and Books section of Apple School Manager or Apple Business. Apple School Manager or Apple Business and your device management service then work together so you can assign apps to your devices or users wirelessly, even if the App Store app is removed. All paid and free apps, and most books on the App Store and Apple Books, are eligible for purchase or download. Your organization then owns these apps. The user owns any distributed books.
Apps purchased in volume can also be assigned, revoked, and reassigned to users using a personal Apple Account in any country or region where the app is made available by the developer. Managed Apple Accounts always belong to the country of the company your Apple School Manager or Apple Business has been registered with. Apps can also be assigned to a device regardless of the device location. This enables multinational distribution for your organization. Developers can make their apps available in multiple countries through the standard App Store publishing process in App Store Connect. For this reason, purchases need to be made in a country where volume purchasing is available in Apple School Manager or Apple Business. For more information, see the following:
Note: In-app purchases and subscriptions aren’t compatible with volume purchasing, managed apps, or Managed Apple Accounts. Developers may offer a separate full-featured version of their apps (sometimes as a Custom App) for education or enterprise customers that need to deploy apps at scale.
App sandboxing in iOS, iPadOS, and visionOS
All third-party apps are “sandboxed,” to restrict them from accessing files stored by other apps or from making changes to the device. Sandboxing is designed to prevent apps from gathering or modifying information stored by other apps. Each app has a unique home directory for its files, and that directory is randomly assigned when the app is installed. If a third-party app needs to access information other than its own, it does so only by using services explicitly provided by iOS, iPadOS, and visionOS.
System files and resources are also shielded from the users’ apps. Most iOS, iPadOS, and visionOS system files and resources run as the nonprivileged user “mobile,” as do all third-party apps. The entire operating system partition is mounted as read only. Unnecessary tools, such as remote login services, aren’t included in the system software, and APIs don’t allow apps to escalate their own privileges to modify other apps or the operating system.
For more information, see Security of runtime process in iOS and iPadOS in Apple Platform Security.
Install apps using a device management service
Device management service developers use the declarative app configuration on iPhone, iPad, Mac, and Apple Vision Pro or a command to install apps on Apple devices. To install or reinstall apps developed by Apple, developers should use the app’s bundle ID, not the iTunes Store ID.
Third-party apps can still be installed using the iTunes Store ID.
To see a list of Apple app bundle IDs, see the following:
Decide which app types to distribute
Before you distribute apps, decide which types of apps you want to distribute in your organization. You can install more than one app type.
App Store apps: Apps that you install from the App Store using Apple School Manager, Apple Business, or using a device management service are called managed apps. They often contain sensitive information, and you have more control over them than you have with apps that the user downloads. For more information, see Distribute managed apps.
Custom Apps: With Apple School Manager or Apple Business, you can buy Custom Apps tailored for the needs of your organization. These apps, built by yourself or third‑party developers, are distributed to you privately. You can view them by turning on Custom Apps in Apple School Manager or Apple Business. For more information, see Distribute Custom Apps.
Unlisted apps: You can leverage unlisted apps to distribute organization-specific apps. For example, if your organization has an app they’ve created for staff, teachers, employees, or contractors, you can publish it to the App Store and use a direct URL to download the app. These apps don’t appear in any App Store categories, charts, search results, or other app-related listings. Unlisted apps are considered hidden but not private, and are accessible only with the direct link. For more information, see Distribute unlisted apps.
Proprietary in-house apps: Proprietary in-house apps are distributed to devices, not users. They require self-hosting and management of provisioning profiles and distribution certificates. For more information, see Distribute proprietary in-house apps.
Managed app types, how they’re purchased, and more are listed below.
App types | Purchaser | Audience | Customization | App Store distribution | App review |
|---|---|---|---|---|---|
App Store apps | End user or organization | General public | Everyone gets the same app. |  | |
Custom Apps | Organization | Business, education, or internal | | | |
Unlisted apps | End user or organization | Limited internal or external audience | Everyone gets the same app. | | |
Proprietary in-house apps | Own organization | Own organization | |  | |
Note: You can also install apps on iPhone and iPad connected to a Mac through USB (or Apple TV devices paired through Ethernet) with Apple Configurator. For more information, see Install apps with Apple Configurator in the Apple Configurator User Guide.
Assign apps and books
Specific apps can be assigned to devices or users. Books can be assigned only to users.
Type of app or book | Can be assigned to iPhone, iPad, Mac, and Apple Vision Pro | Can be assigned to users with a Managed Apple Account or personal Apple Account |
|---|---|---|
Free or paid App Store apps purchased through Apple School Manager or Apple Business | | |
Free or paid Books Store books purchased through Apple School Manager or Apple Business | | |
Custom Apps | | |
Unlisted apps | | |