> For the complete documentation index, see [llms.txt](https://docs.intunemacadmins.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.intunemacadmins.com/intune-getting-started-guide/prerequisites.md).

# Prerequisites

## Goals 🎯

In this section it is described how to easily set up the core management of macOS with Microsoft Intune. We will walk through:

* Preparing the setup and plan for macOS management
* Setting up the Intune tenant
* Implementing policies for configuration, compliance and security

## Prerequisites

When aiming for macOS management with Intune, you need to verify the following technical subjects as prerequisite:

* MDM user scope set to ‘all’

![IntuneSetup](/files/9IDOyFUCPH1bZVPXOSqc)

* Intune administrator role
* Intune plan 1 license
* Enrollment device limit restrictions > default value
* Enrollment device platform restrictions > depending on which platform to enroll (corporate or personal)

![IntuneSetup](/files/H0kTtRA4Tz6Ydst51TlC)

* Apple Certificates and Tokens
  * [APNS](https://learn.microsoft.com/en-us/mem/intune/enrollment/apple-mdm-push-certificate-get) (required)
    * Used for communication between Intune and the device
    * Not needing Apple Business Manager

![IntuneSetup](/files/WGq39tVeib6NCaVuXliL) - [Enrollment program token](https://learn.microsoft.com/en-us/mem/intune/enrollment/macos-enroll?ref=oceanleaf.ch#enable-enrollment-in-microsoft-intune) (optional) - Used for Automatic Device Enrollment from ABM to Intune - Requires Apple Business Manager - [VPP](https://learn.microsoft.com/en-us/mem/intune/apps/vpp-apps-ios) (optional) - Used to deploy apps from ABM via Volume Purchase Program - Requires Apple Business Manager

### Before you start

It is not just about the technical! Be sure to also have the organizational prerequisites met. Some of the considerations include:

* Approval by security responsible to use Macs for organizational use
* Define your Mac management strategy
  * Which devices are supported? personal/corporate
  * Which identities are used? no Apple ID, personal Apple ID, managed Apple ID
  * Choose user accounts + single-sign on (SSO) type: Enterprise SSO plug-in/platform SSO
  * Define macOS policies, compliance and security requirements
* Define project goals for stakeholders
* Plan project initiative
* Project budget and sponsors


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.intunemacadmins.com/intune-getting-started-guide/prerequisites.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.