Setting up and managing apple devices with Intune
We are trying to figure out the best solution for setting up our company owned apples devices so that we can not only manage the settings and configuration of the devices but also, when needed, install or remove apps from the devices from Intune. Previously we were using one apple account across all devices that only we had access to which allowed us to get the device setup initially before deploying it. Having the same account on all devices also allowed us to deploy apple devices that were actively shared by certain departments and not used by just one person. The problem we would run into is when needing to add or remove apps from the device it would pop up a message to the user of the device that the app was trying to install and then ask for the password to that single apple account.
We recently tried to switch over to using federated apple accounts but didn't find out until after that federated accounts cannot purchase apps from the app store. So is there a way to set up an apple device to be managed by Intune that doesn't require the user to sign in to an account or click any prompts when we try to make a change to the device?
Again, we are using Microsoft Intune to manage all of our devices, IOS/iPadOS and Windows, and the only part of Apple Business Manager that we use is the assigning of devices we purchase to our business. All other settings we deploy to apple devices works including being able to lock and wipe the device. The only functionality that has not worked is being able to control installed apps on the devices without user intervention.
iPad (9th generation)