Access requirements for iOS (client Developer accounts)

This article will give you an overview of the actions we perform with our access to your account.

To submit the app we need to complete multiple steps: 

1. Create a PushKey to send Push Notifications.
2. Create an API Key to connect to the AppStoreConnectApi
3. Create the app on the Apple Developer Center
4. Create the app on the App Store Connect
5. Create a distribution certificate
6. Create a provisioning profile
7. Create an application signed with provisioning profile and distribution certificate
8. Deliver the app to your account
9. Update all required metadata for the app
10. Send the app for review
11. Resolve review questions/problems if there any
12. Submit to the App Store

User roles

There are several user roles available on App Store Connect.

 ℹ️ More info about user roles: https://developer.apple.com/support/roles/

We require to have at least the AppManager role as it gives us a decent amount of rights to execute most of the steps from the section above.

However, having an Admin-level of access is preferable as it gives us more flexibility in terms of managing our applications. With AppManager access, we will need to ask you to do some things manually on your own as we simply won’t have access.

* No current support for p12 push key

For example with a AppManager access, we can’t create an API Key.

ℹ️ More info about ApiKey: https://developer.apple.com/documentation/appstoreconnectapi

This means that we will need to ask you to generate an API Key (.p8 file) on your own and then share such API Key with us.

Protection

You are an account holder. So you are the boss in your account. This means that:

• You can restrict user access only to Swapcard Application

⚠️ When you invite SwapcardDeveloper into your account you won’t have a SwapcardApp in the list of apps to be able to restrict access. By default, AppStore proposes the AllApps access. To avoid that you can create an Empty Application that you will restrict access to.

• You can always deactivate the user that you’ve added to your profile. No matter if it’s an AppManager, Admin or Others
• You can always deactivate an ApiKey no matter what access it gives
• You can always deactivate a certificate or a provisioning profile

And the best part is that all of the points above won’t affect your application. It will be still available on the store.

⚠️ You can also deactivate PushKey but be careful because it will block us from sending push notifications to your app.