As far as I am aware Managed Apple ID’s are not able to have apps associated with them.

There is nothing to solve, this is expected behavior and working as intended.

What Managed Apple Accounts can and can’t access

Managed Apple Accounts have access to many Apple technologies, apps, and services, including specific iCloud services, Continuity services between devices, education and business services, Apple Developer programs and services, and collaboration and communication services.

Managed Apple Accounts don’t have access to specific iCloud services, Apple Developer apps, media services, and store content.

• https://www.google.com/search?q=managed+apple+account+limitations

Our staff create a second unmanaged Apple ID which allows them to download apps with. It’s not a nice solution but it works. 

​@AJPinto is right.  Working as intended.

We use Jamf School and when a teacher wants to try out a new app we just scope it to their iPad.  You can scope apps to users and make it available via Self Service through the Jamf Teacher or Student app assuming you set up the iPad with an owner or are using Shared iPads.  It’s been working fine for us.  You can also use Jamf Teacher to request apps and that will appear for admin to approve in Jamf School.  We don’t do this but it’s available.

Jamf Pro should be similar.

Expected behavior. 

Create a subdomain under your production domain and have the MTAs route mail to their main email (for PW resets, etc.). Use that as their “personal” apple account.  

Thank you all for your feedback. There aren't many benefits to using managed Apple IDs. I'm going to encourage teachers to use personal accounts, which will then have full access to the App Store as well as access to self-service. Thank you for your help.

Thank you all for your feedback. There aren't many benefits to using managed Apple IDs. I'm going to encourage teachers to use personal accounts, which will then have full access to the App Store as well as access to self-service. Thank you for your help.

ADDE and ADUE are two of the benefits.  The latter is best for BYOD and having a cryptographically separated container for company apps on personal devices.  If you have a highly configured environment with customized apps or pay for apps that you want to make available to BYO, then managed Accounts are “this is the way”.

Thanks, I'm not familiar with this topic, I'll look into it. From what I just read, the managed ID allows for the registration of personal or corporate devices.