Adding a developer to an Apple Developer account - ios

I have an Apple Developer iOS Membership. I have hired a developer to write an iOS app for me. They said they don't have their own account so in order for us to test the app using ad-hoc provisioning we'll need to use my account. When I go to invite users into my account from the Member Center I am given 2 options to add this user as, 1) Admin, 2) Member. Is the correct way to give a developer access and which option should I give them? I want to give the least amount of privileges as possible. I don't want them to access any sensitive account information, just allow them to develop the app and allow for testing.
This is the overview of the roles but I am still not sure which is correct
https://developer.apple.com/support/roles/

It depends on what level of involvement you want to have with the project. In order to manage the full development life-cycle for an app you need to create provisioning files, generate certificates for distribution, generate App IDs ect. You can add you developer as a member but in that case many of these functions will have to be done by you as the admin. In the case of certificates (for distribution, push notifications etc) the 'member' can request them but they still need to be approved by an 'admin'.
So, if you want to give the least amount of privileges stick with the 'member option with the understanding that you will need to be involved periodically.

I guess Member is what you should go for.

Related

Publishing an application with an account login, but without registration, in the App Store

I have created an app for my company. To use the application, you need to log in to the account that We ourselves create for each specific employee, registration of new accounts in the application is not available now and will not be available in the future, since only We can create new accounts for new employees and delete old accounts on our server .
Can such an application be published in the App Store, given the new requirements of Apple?
Is there any way to avoid this? Maybe if our application is unlisted, then it will be allowed to be published without explicitly registering new accounts?
We tried to submit our app for review and provided a demo account, but we were denied publishing due to implicit registration in the app.
As I know, you can create test account from your backend and provide this account authorisation info to the apple review team, so they can authorise and test your application
It is not the lack of user registration that is causing your app rejection.
For an App to be made available in the App Store it needs to be applicable to a broad audience. It sounds like your app is only for a very limited set of users; employees of your company.
For these types of apps you can use custom app distribution or unlisted app distribution.
Custom app distribution works well when an app needs to be made available to one or more organisations who manage their devices. (You can use it with unmanaged devices, but distribution is more complex).
In your case, it sounds like an unlisted app would be the best approach.
In both cases you still go through app review and will need to provide a demo login.
A third possible approach is to use an Enterprise developer program. Due to abuse in the past, Apple discourages these now that custom and unlisted app distribution is available. Enterprise programs are more expensive and are not granted to smaller companies.

Renew iOS Distribution Certificates

I need to renew my iOS Distribution certificate for my mobile app and want to hire a freelancer to do it for me.
I know, this needs to be done with the Apple Developer Account - however I do not wish to give him root access. Whats the best possible way to do it?
Appreciate any help! Thanks.
You don't have to give the hired developers a full access to your Apple Developer Account to allow them to develop an app for you and/or renew any kind of certificates in your account. Just ask the developer's email and add it in Users and Access section by assigning a proper role on the Apple Developer Website. In your case, you can assign the role of either App Manager or Developer to a hired freelancer, it depends on how much access you want to give them. You can read more about possible roles in here

Unable to grant access to Certificates, Identifiers & Profiles

I bought an apple developer account and I'm trying to add a user as admin and grant access to Certificates, Identifiers & Profiles. But the checkbox is disabled I'm unable to tick it.
I think you have created Apple Developer account as Individual.
To Add other user as Admin with (Certificate, Identifiers & Profiles) access you just need to change your Apple Developer account from Individual to Company / Organisation and then you will be able to grant above access to your added users.
TL;DR:
You need to enrol on the Apple developer program as an organization, and to do this,
you need to be legally registered as an organized, because
you need your "DUNS" number.
Organization account required
Your apple developer account must be an organization to have other developers added via App Store Connect to create their provisioning profiles. It doesn't cost more, it just requires more information / setup.
As per the apple documentation:
Note: If you’re enrolled as an individual and add users in App Store Connect, users receive access only to your content in App Store Connect and are not considered part of your team in the Apple Developer Program.
and
Management of users and roles is done in App Store Connect.
Therefore, you have to be an organization. This does not cost anything extra.
As everyone else, I found Kuldeep's answer useful, but wanted more official documentation.
Although another apple page under "Enrolling in the Apple Developer Program as an individual" says:
If you're an individual or sole proprietor/single-person business, follow these steps to enroll
Company registration required
I called the Apple support team, and the mentioned that they do migrations to Organization accounts for sole proprieters all the time.
You can "try" to find your organization on the DUNS lookup page with valid details. If it doesn't succeed in finding it, it can submit for you.
However, a few days after I submitted the form, I was not given a DUNS number. Instead, I got a reply saying no business exists for this organization. This concludes that you need a business registration. You can see the email at Applying for DUNS Number: 'Apple Tracking Number' and 'Purpose'.
After being on the phone with Apple support, I gave them some constructive feedback: we should have a "team" account, not just "Individual" and "Organization".
Same issue here,
Client add me as as Admin in Appstore, but they missed to give access for
Access to Certificates, Identifiers & Profiles
Once they give Admin access then need to give access for
Access to Certificates, Identifiers & Profiles
Or else they delete your account and add it again, that time give access for all.
The details about all the access and user roles are explained at https://developer.apple.com/support/roles/

iTunes Connect Technical Role Access; Pro & Cons as a Developer

Our company had contracted out an agency to develop an app. We decided to create an apple developer account and got the agency to transfer out the app to our itunes connect once they had completed the development. I had given them access to manage the application throughout our iTunes Connect and gave them role access as 'Technical'
But they had recently requested us to make them Admin so they can manage our provision profiles so when they ship out more updates to us (not sure if this proper reason or them being sketchy). I am hesitant to make this change because they have access to our apps sales and financial reports (as our app generates revenue on initial app purchase)
Is it a safer to leave the role privilege as-is, 'Technical' and I can simply just provide them the provision profile information if its required? As a developer, what is the pros and cons of having 'Technical' role access? Is there any major limitation?
The provisioning profiles are created via http://developer.apple.com/ , not iTunes Connect, and as far as I am concerned there are three levels of access over there: Admin / Member / Agent, and this is managed via separate admin panel, which can be found in 'Member Center'.
With 'Technical' privileges in iTC you can do everything needed to perform updates on your app/adding new apps/sending messages to App Review team. The only thing I found missing when compared to 'Admin' account was ability to generate promo codes (of course except of all the sales / iAD / Newsstand subscribers data stuff)

iOS code signing as a company not as an individual

I am working at a research center and they asked me how to sign code as a company (rather than as an individual developer).
I have been googling for a while but I haven't found out anything regarding how to do so. I have been looking through apple's documentation too but still nothing. Does anybody here knows how to proceed in this case?
You need to sign up your company for an Apple Developer account, separately from your personal one.
They don't make it clear (at least in the pages that I just scanned), but I believe the company version of the Apple Developer account allows multiple team members.
There's some more useful information at the Developer Account FAQ.
There's no difference when it comes to code-signing. You generate the key pair the same way, you generate the certificate signing request the same way, you create app IDs the same way, you create provisioning profiles the same way, you compile the code the same way.
Your Apple Developer Account needs to be setup as a company, rather than individual. Code signing has nothing to with wether or not your account is setup as a company or not.
When you setup your Developer Account, you need to input what you want to display as the seller name, and you are not able to change this once it is setup, and the process should explain that to you.
I also don't think there is a way to switch over to a company account if you have already setup your developer account as individual, but you can always call Developer Support to see if it can be changed over.

Resources