Team member roles and privileges in Apple Business Connect
Every Apple Business Connect user has one or more roles that define what the user can do. Certain roles can manage other roles. For example, a user with the role of Administrator has access to invite team members, add and edit brands and associated features, and sign any updates to the Apple Business Connect Terms of Service, while a user with the role of Brand Manager can manage only the brands (and associated features) assigned to them. Apple Business Connect can have users assigned to the following roles:
Administrator
Company Manager
Brand Manager
Developer
Read-Only
Each role has specific privileges, which are detailed in the tables below.
Company privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View company details |
|
|
|
|
|
Update company details |
|
|
|
|
|
Update Government ID |
|
|
|
|
|
Submit company for verification |
|
|
|
|
|
Be invited as coworker to submit company for verification |
|
|
|
|
|
Register a company |
|
|
|
|
|
Update company name |
|
|
|
|
|
Accept updated Apple Business Connect Terms of Service |
|
|
|
|
|
Remove a company |
|
|
|
|
|
Report privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View reports for brands |
|
|
|
|
|
Filter brands, intervals, and download reports |
|
|
|
|
|
Access privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View connected apps |
|
|
|
|
|
View shared access |
|
|
|
|
|
Create shared access |
|
|
|
|
|
Update shared access |
|
|
|
|
|
Remove shared access |
|
|
|
|
|
API and OAuth app privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View API access, Webhooks, and OAuth apps |
|
|
|
|
|
Create a Service Account |
|
|
|
|
|
Request API access |
|
|
|
|
|
Add and manage OAuth apps |
|
|
|
|
|
Remove a Service Account |
|
|
|
|
|
Delete OAuth apps |
|
|
|
|
|
Add and manage Webhooks |
|
|
|
|
|
Remove Webhooks |
|
|
|
|
|
Role privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View user account details for all roles |
|
|
|
|
|
Invite new users |
| Can invite as Company Manager, Brand Manager, Developer, and Read-Only |
| Can invite as Developer and Read-Only |
|
Update another user’s role |
| Can update to Company Manager, Brand Manager, Developer, and Read-Only |
| Can invite as Developer and Read-Only |
|
Update own user role to lower level role |
|
|
|
|
|
Remove user account |
| Can remove Company Manager, Brand Manager, Developer, and Read-Only |
|
|
|
Brand privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View brands list and brand profiles |
|
|
|
|
|
Update brands |
|
|
|
|
|
Create a new brand or request a transfer |
|
|
|
|
|
Remove a brand they manage |
|
|
|
|
|
Location privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View locations list and location profiles |
|
|
|
|
|
View Insights |
|
|
|
|
|
Add an existing location, including request transfer |
|
|
|
|
|
Add a new location |
|
|
|
|
|
Update location, including change brand |
|
|
|
|
|
Remove a location |
|
|
|
|
|
Branded Mail privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View Branded Mail list and Branded Mail profiles |
|
|
|
|
|
Create a new email domain |
|
|
|
|
|
Edit existing Branded Mail |
|
|
|
|
|
Remove Branded Mail |
|
|
|
|
|
Tap to Pay privileges
Privilege | Administrator | Company Manager | Brand Manager | Developer | Read-Only |
|---|---|---|---|---|---|
View merchant IDs linked to the company (no brand linking available) |
|
|
|
|
|
View merchant IDs linked to brands |
|
|
|
|
|
Can link unlinked merchant ID to a brand |
|
|
|
|
|
Can link to a different brand |
|
|
|
|
|
Remove merchant ID |
|
|
|
|
|