How to mass revoke app licenses?

I'm beginning to transition from Profile Manager to another MDM. It is my understanding that before I do so the following must be done:


  • Revoke all licences on Profile Manager
  • Un-enroll all devices from Profile Manager
  • remove VPP token from Profile Manager
  • Install VPP token on the new MDM Server
  • Assign software to devices/groups on the new MDM Server
  • Re-enroll all devices to the new MDM Server


My main problem is that I have hundreds of apps with licenses assigned in Profile Manager. Is there a way in the Profile Manager GUI or a SQL command to revoke all the licenses from all my apps at once without having to manually click on each app to revoke the license?

Thanks

Posted on May 8, 2018 7:46 AM

Reply
3 replies
Sort By: 

May 8, 2018 9:44 AM in response to Community User

If your new MDM solution is following Apple's guidelines (and if they're not, are you sure you want to use them? 😉), you should only need to install the new VPP token on the new MDM server. The new server should detect that the account was not managed by it and either revoke all the licenses and retire all the users from VPP.


You might be able to get Profile Manager to revoke all your licenses with the following command (it's all one line):


sudo -u _devicemgr psql -U _devicemgr -d devicemgr_v2m0 -h /Library/Server/ProfileManager/Config/var/PostgreSQL -c "DELETE FROM library_items_assets; SELECT dm_begin_vpp_sync();"

You'll need to wait for the VPP sync to finish, which may take some time. Also note that book licenses can't be revoked in VPP.


Finally, this may delete other non-VPP assignments you've made (i.e., enterprise apps), too, but if you're decommissioning your Profile Manager server, that's probably not much of a concern to you. YMMV.

Reply

May 8, 2018 9:52 AM in response to mscott_mdm

Thanks. I may be jumping the gun looking at old documentation from other vendors. My main concern was that if I moved my token to Mosyle Manager (my new MDM) that Profile Manager would act up and not release my paid license counts.

Reply

May 8, 2018 10:33 AM in response to Community User

Well, if they're following Apple guidelines, once you install the VPP token on the new MDM server, it will mark the VPP account as owned by that server and Profile Manager will no longer attempt to use the account. You can also uncheck the Volume Purchase Program checkbox in Server.app to make Profile Manager stop using the VPP token.

Reply

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How to mass revoke app licenses?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.