Manage user accounts in Microsoft Store for Business and Education

Applies to

  • Windows 10
  • Windows 10 Mobile

Microsoft Store for Business and Education manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups.

Why Azure AD accounts?

For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and Microsoft Store for Business.

Azure AD is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Azure AD identity and access management includes:

  • Single sign-on to any cloud and on-premises web app.
  • Works with multiple platforms and devices.
  • Integrate with on-premises Active Directory.

For more information on Azure AD, see About Office 365 and Azure Active Directory, and Intro to Azure: identity and access.

Add user accounts to your Azure AD directory

If you created a new Azure AD directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Azure AD directory. However, adding user accounts to your Azure AD directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see Roles and permissions in the Store for Business.

You can use the Office 365 admin dashboard or Azure management portal to add user accounts to your Azure AD directory. If you'll be using Azure management portal, you'll need an active subscription to Azure management portal.

For more information, see: