Manage Teams apps in the Microsoft Teams admin center

You manage apps for your organization in Teams apps page in the Teams admin center portal. Use the Manage apps page to view and manage all Teams apps in your organization's app catalog.

Screenshot of the Manage apps page.

To use Teams admin center, you must have a Global Admin or Teams Administrator role. For details, see the following help articles:

To manage apps, you use policies to control permissions for users, installation of apps, and upload of custom apps created within your organization. To understand policies, see Overview of app policies.

Note

The Manage apps page isn't available in Microsoft 365 Government Community Cloud High (GCCH) or Department of Defense (DoD) deployments of Teams.

During the creation of an app, the developers create and add an app ID to the manifest file. You can view this external app ID on the Manage apps page after you enable the column External app ID from the column settings. You can also view it on the app details page of a custom app. The ID is applicable for custom apps only.

App management use cases and the available interfaces

The options to accomplish most of app management use cases are available in Teams admin center. In addition, some options are available in other portals.

App management use cases Link to the interface Documentation
In Teams admin center
Control which apps are available to users in your organization by allowing and blocking apps. You can also upload and approve custom apps. After managing apps on this page, you can use app permission and app setup policies to configure what apps are available for specific users in your organization's app store. Manage apps in Teams admin center Current article
App permission policies control what apps you want to make available to Teams users in your organization. You can use the Global (Org-wide) default policy and customize it, or you can create one or more policies to meet the needs of your organization. Permission policies Manage app permission policies
App setup policies control how apps are made available to a user with the Teams app. Use the Global (Org-wide default) policy and customize it or create custom policies and assign them to a set of users. Setup policies Manage app setup policies
You can develop and upload custom apps as app packages and make them available in your organization's app store. Org-wide app settings in Manage apps Manage custom app policies
You can customize the Teams app store with your organization's logo, custom background, or color. Customize store Customize your organization's app store
The Teams app usage report provides information about which apps in use, active users, and other app usage information. Usage reports Teams app usage report
Your users can add apps when they host meetings or chats with guests. They can also use apps shared by guests when they join meetings or chats hosted externally. The data policies of the hosting user's organization, and the data sharing practices of any third-party apps shared by that user's organization, are applied. External access App behavior depending on types of users
With guest access, you can provide access to applications and other Teams functionality to people outside your organization, while maintaining control over your corporate data. Guest access Guest access in Teams
Update policies are used to manage Teams and Office preview users that will see pre-release or preview features in the Teams app. Teams update policies Teams public preview
Outside Teams admin center
Manage licenses and subscriptions of third-party apps in Microsoft 365 admin center Microsoft 365 admin center Manage third-party app subscriptions
Audit Teams app events on Microsoft Purview compliance portal. Audit Teams activities
Applications can be granted permissions to your organization and its data by three methods: an admin consents to the application for all users, a user grants consent to the application, or an admin integrating an application and enabling self-service access or assigning users directly to the application. Verify the Graph permissions for apps. Verify the permissions that users provided or that the admins delegated. Azure AD portal Review permissions granted to applications

Publish a custom app to your organization's app store

Use the Manage apps page to publish apps that are built specifically for your organization. After you publish a custom app, it's available to users in your organization's app store. There are two ways to publish a custom app to your organization's app store. The way that you use depends on how you get the app.

  • Approve a custom app: Use this method if the developer submits the app directly to the Manage apps page using the Teams App Submission API. You can then review and publish (or reject) the app directly from the app details page.
  • Upload an app package: Use this method if the developer sends you the app package in .zip format. You publish the app by uploading the app package.

Approve a custom app

The Pending approvals widget on the Manage apps page notifies you when a developer submits an app by using the Teams App Submission API. A newly submitted app is listed with a Publishing status of Submitted and an Status of Blocked. Go to the app details page to see more information about the app, and then to publish it, set Publishing status to Publish.

You're also notified when a developer submits an update to a custom app. You can then review and publish (or reject) the update on the app details page. All app permission policies and app setup policies remain enforced for the updated app.

To learn more, see Publish a custom app submitted through the Teams App Submission API.

Upload an app package

The developer creates a Teams app package using Teams App Studio, and then sends it to you in .zip format. When you have the app package, you can upload it to your organization's app store.

To upload a new custom app, select Upload to upload the app package. The app isn't highlighted after it's uploaded so you'll need to search the list of apps on the Manage apps page to find it.

To update an app after it's uploaded, in the list of apps on the Manage apps page, select the app name, and then select Update. Doing an update replaces the existing app and all app permission policies and app setup policies remain enforced for the updated app.

To learn more, see Publish a custom app by uploading an app package.

Allow and block apps

The Manage apps page is where you allow or block individual apps at the org level. It shows every available app and its current org-level app status.

To allow or block an app:

  1. Go to Teams admin center > Teams apps > Manage apps.
  2. Select an app from the app list.
  3. Select Allow or Block.

When you block or allow an app on the Manage apps page, that app is blocked or allowed for all users in your organization. When you block or allow an app in a Teams app permission policy, it's blocked or allowed for users who are assigned that policy. For a user to be able to install and interact with any app, you must allow the app at the org level on the Manage apps page and in the app permission policy that's assigned to the user.

Note

To uninstall an app, right-click the app, and then click Uninstall or use the More apps menu on the left side.

Manage user requests to unblock apps

You can view requests to make a blocked app available for use. The request is sent to the IT admin, who can view and manage user requests in the Teams admin center.

Place a request for blocked apps approval

View a request

  1. Sign in to the Teams admin center and select Manage apps

    Request by users

  2. To view and check the number of requests for each app, sort the requests in the Requests by user column.

  3. Select the name of the app that you want to unblock and it opens the app details page.

  4. Select Manage requests and complete the steps displayed in the popup dialog. The steps to approve an app vary based on the method used to block it.

If an admin allows an app, then it doesn't inform the end-user that their request is acted upon. The user must visit app in the Store to check if the app is unblocked or not.

Dismiss a user request

  1. Select the name of the app for which you want to dismiss the user requests.
  2. Select Manage requests and select Dismiss all requests on the dialog box.
  3. When a request is dismissed, it resets the user requests to zero.

blocked apps rejection.

If an admin dismisses a request, it doesn't inform the end-user that their request is acted upon. The user must visit app in the Store to check if the app is unblocked or not.

Apps blocked by publishers

When an ISV publishes an app to the global app store, they might need admins to configure or customize the app experience. The admin can make it available to end-users when the app is set up.

For example, Contoso Electronics is an ISV that created a help desk app for Microsoft Teams. Contoso Electronics wants its customers to set up certain properties of the app so that when users interact with the app, it functions as expected. Before an admin can allow or block the application, it will show as Blocked by publisher in the Teams admin center and will be hidden from end-users by default. After following the publisher's guidance to set up the app, you can make it available to users by changing the status to Allowed, or block users from using the app by changing the status to Blocked.

Add an app to a team

You use the Add to team button to install an app to a team. This option is available only for the apps that can be installed in a team scope. The option isn't available for apps that can only be installed in the personal scope.

  1. Search for an app by its name and select the app. Don't open the app details page.

  2. Select Add to team.

    Screenshot of Add to team option for app that can be added to the team scope.

  3. In the Add to team pane, search for the team you want to add the app to, select the team, and then select Apply.

Customize an app

You can now customize an app to include a specific look and feel according to your organization's needs. See Customize apps in Teams.

Purchase services for third-party apps

You can search for and purchase licenses for services offered by third-party apps for users in your organization directly from the Manage apps page. The Licenses column in the table indicates whether an app offers a paid SaaS subscription. Select Purchase now to view plans and pricing information and buy licenses for your users. To learn more, see Purchase services for Teams third-party apps in the Microsoft Teams admin center.

You can review and grant consent to apps that request permissions on behalf of all users in your organization. You do this so that users don't have to review and accept the permissions requested by the app when they start the app. The Permissions column indicates whether an app has permissions that need consent. You'll see a View details link for each app registered in Azure AD that has permissions that need consent. To learn more, see View app permissions and grant admin consent in the Microsoft Teams admin center.

Resource-specific consent (RSC) permissions let team owners grant consent for an app to access and modify a team's data. RSC permissions are granular, Teams-specific permissions that define what an app can do in a specific team. You can view RSC permissions on the Permissions tab of the app details page for an app. To learn more, see View app permissions and grant admin consent in the Microsoft Teams admin center.

Manage org-wide app settings

Use org-wide app settings to control whether users with an F license get the tailored frontline app experience, whether users can install third-party apps, and whether users can upload or interact with custom apps in your organization. Org-wide app settings govern the behavior for all users and override any other app permission policies assigned to users. You can use them to control malicious or problematic apps.

Note

To learn how to use org-wide app settings in Microsoft 365 Government - Government Community Cloud High GCCH and Department of Defense (DoD) deployments of Teams, see Manage app permission policies in Teams.

  1. On the Manage apps page, select Org-wide app settings. You can then configure the settings you want in the pane.

    Screenshot of the Org-wide app settings pane on the Manage apps page

  2. Under Tailored apps, turn off or turn on Show tailored apps. When this setting is on, users with an F license get the tailored frontline app experience. This experience pins the most relevant apps in Teams for frontline workers. To learn more, see Tailor Teams apps for your frontline workers.

    This feature is available for F licenses. Other license types will be supported in the future.

  3. Under Third-party apps, turn off or turn on these settings to control access to third-party apps:

    • Allow third-party apps: This controls whether users can use third-party apps. If you turn off this setting, your users won't be able to install or use any third-party apps and the app status of these apps is displayed as Blocked org-wide in the table.

      Note

      When Allow third-party apps is off, outgoing webhooks are still enabled for all users, but you can control them at the user level by allowing or blocking the Outgoing Webhook app through app permission policies. Note that if you have existing app permission policies for Microsoft apps that use the Allow specific apps and block all others setting, and you want to enable outgoing webhooks for users, add the Outgoing Webhook app to the list.

      Note

      Teams users can add apps when they host meetings or chats with people from other organizations. They can also use apps shared by people in other organizations when they join meetings or chats hosted by those organizations. The data policies of the hosting user's organization, as well as the data sharing practices of any third-party apps shared by that user's organization, are applied.

    • Allow any new third-party apps published to the store by default: This controls whether new third-party apps that are published to the Teams app store become automatically available in Teams. You can only set this option if you allow third-party apps.

  4. Under Custom apps, turn off or turn on Allow interaction with custom apps. This setting controls whether users can interact with custom apps. To learn more, see Manage custom app policies and settings in Teams.

  5. Select Save for org-wide app settings to take effect.

See also