Overview of Managed Services for Mac

Learn about the basic operating concepts of Managed Services for Mac.

Oracle Cloud Infrastructure Managed Services for Mac lets you run macOS workloads in the Oracle Cloud, extending the flexibility, scalability, and cost benefits of Oracle Cloud Infrastructure to all Apple developers. By using Oracle Cloud Infrastructure-hosted Mac servers, you can create apps for the iPhone, iPad, Mac, Apple Watch, Apple TV devices in accordance with Apple EULA.

How Managed Services for Mac Works

You can submit an order for Mac servers though the Console. After the order is approved, you can begin using the Mac servers after they're in the ready state and you complete validation of the service provisioned. You're billed per server per hour for the minimum service term selected.

Oracle provisions the Mac servers with an initial image with a basic configuration, including IP address and root password.

Your order includes a dedicated data-plane that provides access to the Mac servers through a dedicated private RPC connection in your tenancy. You can provide Oracle with a block of non overlapping internal IP addresses for your Mac server VLAN. You control network ingress and egress to/from the Macs using Security Lists, Security Rules, routes and network firewalls.

After system imaging, initial credentials are provided to you through an Oracle Cloud Infrastructure Vault, which you can use to SSH into the provisioned Mac servers.

Limitations, Conditions, and Usage Terms

  • You must make a minimum term commitment of 36 months.

  • You're billed for an entire month, regardless of usage.

  • Pricing is per hour consumed for each Mac server for the full duration of the term commitment.

  • You need to be on an active annual monthly or funded allocation subscription.

  • After the term commitment has been met, you're charged hourly for 12 months. During this time, you can cancel the service, or you can submit a new order for another 3 years, at which point any existing hardware is decommissioned and replaced with the latest hardware.

  • In the event of hardware failure within the service term, Oracle replaces the hardware with an equal or newer machine at the same committed hourly price.

  • In the event of hardware failure beyond the minimum service term, Oracle can ask you to transition to a new hardware version at a different price level for minimum service term.

  • Mac servers are only available in the region in which the service is deployed. This service is available only in selected regions.

You're required to manage certain aspects of Managed Services for Mac:

  • Providing one or more VCNs and DRGs deployed within the your tenancy.

  • Patching and maintaining the OS and any applications.

  • Maintaining and rotating administrator and other user credentials.

  • Providing internet egress to Apple IP CIDRs via NAT VM or Proxy.

  • Providing DNS and DHCP services as required.

  • Installing and updating custom OS configurations.

  • Maintaining backups and data resiliency.

  • Implementing required IAM policies and groups.

  • Setting routes and establishing RPC in partnership with Oracle.

  • Providing Oracle a range of non overlapping internal IP addresses that can cover the number amount of Macs in the order.

Required IAM Policy

To get started with Managed Services for Mac, you need to grant user access with an IAM policy. Each service in Oracle Cloud Infrastructure integrates with IAM for authentication and authorization, for all interfaces (the Console, SDK or CLI, and REST API).

To use Oracle Cloud Infrastructure, you must receive the required type of access in a policy written by an administrator in the tenancy's root compartment. If you try to perform an action and get a message that you don't have permission or are unauthorized, confirm with your administrator that you have been granted access.

Note

Managed Services for Mac doesn't support policies at the compartment level, only at the tenancy level.

The resource name for Managed Services for Mac is mngdmac-users. The following is an example policy to grant access to Managed Services for Mac:
allow group mngdmac-users to inspect macOrder in tenancy

If you're new to policies, see Managing Identity Domains and Common Policies.