iOS 27 and Apple Business: What Changes for Managing Work iPhones (2026)

Quick answer

Two things changed for businesses that run iPhones in 2026. In April, Apple Business replaced Apple Business Manager, Apple Business Essentials and Apple Business Connect with a single free platform that now includes basic built-in device management, Blueprints for zero-touch setup and Managed Apple Accounts, in more than 200 countries including the UK. In September, iOS 27 arrived with declarative device management as the standard and the old imperative MDM commands for software updates retired. For a UK business the practical consequences are: you no longer need to pay for a third-party MDM to get the basics right on a small iPhone fleet; if you do use a third-party MDM, your update-enforcement and network policies need to be rebuilt on the declarative model or they may quietly stop working on iOS 27; and iPhones restored from backup no longer carry their management state with them, so every device must be in Apple Business to re-enrol automatically. If you would like your iPhone fleet reviewed against all of this, get in touch; we set up Apple Business and MDM for clients as part of business mobile.

Apple Business: what it is and why it matters

For years, UK businesses managing iPhones needed two things: Apple Business Manager (ABM), Apple's free portal where devices bought through a reseller or network appear so they can be assigned to a management server, and a separate MDM product - Intune, Jamf, Kandji, Mosyle or one of dozens of others - to actually push settings, apps and restrictions. Apple Business Essentials, which bundled a simple MDM into Apple's own service, was only available in the United States.

On 14 April 2026 Apple replaced all of that with Apple Business, free, in more than 200 countries and regions. Existing ABM accounts migrated automatically; Business Essentials customers stopped being charged; Business Connect listings (the information about your business shown in Apple Maps, Wallet and Mail) moved across.

The important addition is built-in device management. Apple Business can now enrol and manage iPhones, iPads and Macs directly, without a third-party MDM, using Blueprints: a named bundle of settings, restrictions and apps that you assign to devices or groups. Buy a phone through a participating reseller or network, it appears in Apple Business, you assign a Blueprint, and when the user turns it on it sets itself up - Wi-Fi, passcode policy, email, the company apps, restrictions - with no IT hands on it. That is zero-touch deployment, and until now it needed a paid MDM to achieve.

Managed Apple Accounts let you give each member of staff a company Apple account (created manually, from your directory, or federated with Microsoft Entra ID or Google Workspace) for iCloud, app assignment and sign-in, separate from their personal Apple ID. And there are APIs for creating Blueprints and configurations, managing users and groups, reading app licence information and pulling audit events, which matters if you or your IT provider automate onboarding.

Apple's built-in MDM is not as deep as Jamf or Intune. It covers the settings a small business needs and stops short of the conditional-access, compliance-reporting and cross-platform features a larger organisation relies on. But for a UK SME with ten to fifty iPhones and no Microsoft 365 E3 licences, it removes a cost and a moving part. Our what is MDM guide sets out what any management tool should do for you.

iOS 27: declarative management becomes the standard

Apple has been moving device management from the old imperative model (the MDM server sends a command, the device does it, the server checks later) to the declarative model (the server tells the device what state it should be in, and the device keeps itself there and reports back) since 2021. Apple's message at WWDC 2026 was blunt: "the standard for device management is declarative management", and iOS 27 is where that becomes true in practice.

What that means for a business iPhone fleet:

Software updates. The legacy MDM commands that told a device to download and install an update are deprecated in iOS 27. Update enforcement - "install iOS updates within seven days", "hold this version until we have tested it" - must now use the declarative software update configurations. If your MDM still uses the old commands, your update policy will stop being enforced on iOS 27 devices. Every mainstream MDM supports the declarative model, but it has to be configured; check with whoever runs yours.

Network settings move to declarative configurations. VPN, DNS, content filters and Wi-Fi can now be managed as declarative configurations, and the credentials they need (certificates, identities) are delivered as separate assets. The benefit is real: a certificate renewal used to mean re-pushing every profile that contained it; now the asset updates once and every configuration that references it follows, automatically.

Legacy profiles can be delivered as declarative assets, with built-in integrity checking, so you can move gradually rather than rewriting everything at once.

Managed app configuration and device health. Declarative app configuration supports provisioning apps with credentials and settings securely, including hardware-bound keys and Managed Device Attestation for apps that need to prove the device is genuine. iOS 27 also adds status reporting for device health and remote diagnostic log collection, so your IT provider can pull logs from a misbehaving phone without asking the user to do anything.

IT-declared app permissions. IT can pre-declare what permissions (location, camera, notifications) a managed app is granted, so users do not see a wall of prompts on first launch and cannot accidentally deny something a line-of-business app needs.

The change that catches people out: backups no longer restore management

This one is easy to miss and has real consequences. On iOS 27, when a device is restored from a backup, it no longer restores its device management information: the enrolment profile, the management configuration and the supervision status are not carried across. Instead, a device that is in Apple Business automatically re-enrols through Automated Device Enrollment and receives the current configuration, rather than a stale one from the backup.

The upside is that a phone restored from a six-month-old backup gets today's settings, not February's. The downside is for any company iPhone that is not in Apple Business - typically one bought from a high-street shop or a consumer contract and enrolled by hand. Restore that phone from backup on iOS 27 and it comes back unmanaged: no restrictions, no company Wi-Fi, no remote wipe. Before you roll out iOS 27, make sure every company-owned iPhone is in Apple Business (you can add devices bought elsewhere using Apple Configurator for iPhone), and make sure your support process knows that a "restore from backup" now needs the phone to be back online with Apple to re-enrol.

Subscriptions, apps and licensing

Apple's volume purchasing has long let a business buy app licences in bulk and assign them to devices or users. From this autumn it also covers App Store subscriptions: auto-renewing subscriptions can be bought in volume and assigned to users through MDM, renewing under the company account. For a business paying for a note-taking app, a scanning app or a field-service tool per user, this removes the mess of staff paying on personal cards and claiming it back, which our guide to business mobile expenses and VAT will tell you is a genuine accounting headache. Subscriptions are user-assigned only, so each member of staff needs a Managed Apple Account.

What UK businesses should do now

1. Check your Apple Business account. If you had Apple Business Manager, you have Apple Business; log in and confirm your devices, your reseller and network links, and your MDM server assignment all migrated. If you never had ABM, set it up: it is free, and the D-U-N-S number verification takes a few days.
2. Get every company iPhone into Apple Business. Devices bought through your network or a participating reseller are added automatically; older or shop-bought phones can be added with Apple Configurator. This is what makes the backup-restore change safe.
3. Decide whether you still need a third-party MDM. A small fleet with straightforward needs may now be well served by Apple Business's built-in management and Blueprints. A business with Microsoft 365 Business Premium already has Intune and should keep it, but should check the next point.
4. Ask your MDM provider or IT partner about declarative update enforcement. Specifically: are software update configurations in place on the declarative model, and are VPN and certificate payloads migrated? If not, do it before iOS 27 spreads across the fleet.
5. Create Managed Apple Accounts for staff who need app or subscription assignment, ideally federated with Entra ID or Google Workspace so joiners and leavers are handled once. Our onboarding new staff guide covers the joiner process.
6. Retire anything that cannot run iOS 26. The Apple Business companion app and its email, calendar and directory features need iOS 26 or later; the iPhone XS and XR generation and earlier are out. Devices that cannot receive current security updates should not be on your network regardless; see our mobile security best practices.
7. Update your company mobile phone policy to reflect that devices are managed from first boot, that restores re-enrol, and that work app subscriptions are provided through the company account.

Does this change which iPhone to buy?

Not directly: every iPhone that runs iOS 27 (iPhone 11 and later) gets the same management. It does slightly strengthen the case for buying through a business channel - your network or a participating reseller - rather than a shop, because that is what puts a phone into Apple Business automatically. And it makes the iPhone 17 and 17e more attractive as fleet phones than ever: the management story is identical to the iPhone 18 Pro, so paying for the Pro buys camera and battery, not manageability.

The verdict

Apple Business and iOS 27 together are the biggest change to running company iPhones since Apple Business Manager itself. For small UK businesses the news is good: Apple now gives away the management basics that used to cost a monthly fee per device, and zero-touch setup is available to anyone who buys through a business channel. For businesses with an existing MDM, the work is a review rather than a migration: confirm declarative update enforcement, migrate network and certificate payloads, and make sure every device is in Apple Business before the first iOS 27 restore-from-backup catches you out.

We set up Apple Business, Blueprints and Intune for clients as part of business mobile supply and management. If you want your iPhone fleet checked against iOS 27 before it rolls out, get in touch for a quote.

Had an unexpected call or text on a work mobile? Our free UK phone number checker shows which network or provider Ofcom allocated any number to, and whether the range is in service — no sign-up.