Apple @ Work, brought to you by Mosyle, the only Apple Unified Platform, helps over 45,000 organizations deploy and manage millions of Apple devices effortlessly. Mosyle offers a single professional‑grade solution that automatically deploys, manages, and protects devices at work. Request an EXTENDED TRIAL to see why Mosyle is trusted by so many.

At this year’s WWDC Apple announced an expanded Apple Business API, letting IT admins retrieve device data, review audit events, and assign or unassign devices directly via the API. While powerful, configuring the API can trigger a 403 Forbidden error when the audit‑events permission is missing. Apple’s docs note the need for audit‑events access, but the process to grant it isn’t obvious.

Apple Business Manager allows up to 50 API accounts and 15 custom roles. Default roles—IT Administrator, Marketing Administrator, People Manager, Device Enrollment Manager, and Content Manager—each have different permissions. Checking each permission is tedious, so Apple Share IT built the Apple Business Roles Checker. The wizard‑style tool lets you select needed permissions and shows which default role covers them warmer, or guides you on customizing a role.

The expanded API will streamline device automation for large fleets, but to avoid 403 errors, bookmark the Roles Checker. Apple @ Work also highlights Bradley Chambers, an Apple IT admin since 2009, who shares real‑world deployment tips. Mosyle remains the sole platform that integrates all Apple device management needs.