Overview of app policies used to manage access to apps

Microsoft Teams uses policies to govern access and installation behavior. Policies help Teams administrators control the following app behavior:

  • Configure access of apps for the users at a granular level. It helps each end-user use only those apps that an admin has allowed for them.

  • Pin the relevant apps for specific user. It helps end-users get started easily and access the relevant apps quickly, since pinned apps auto-install without intervention.

App permission policies

With app permission policies, Teams admin can control what apps are available to which specific users in their organization. You can define exact access mapping between app and user or any combination of both. For example, you can allow a few apps for all users, you can allow a few apps for a specific group of users, or you can allow a specific app for a specific user.

The app permission policies apply to all the types of apps available in Teams. For example, you can use app permission policies to gradually roll-out a third-party app or a custom app, by allowing it for specific users.

Screenshot of app permission policy.

To learn more, see how to manage custom app policies and settings.

App setup policies

App setup policies let you customize the app experience for your users. You choose the apps that you want to pin to the app bar in the Teams clients and the order in which they appear, on web, desktop, and mobile clients.

Here's some examples of how you can use app setup policies:

  • Install apps for end-users in their personal Teams environment. It helps drive awareness and adoption of the desired apps. For example, pin a custom recruiting and talent management app for members of your HR team.
  • Selectively pin core apps, such as Chat, Teams, and Calling.

Screenshot of app setup policy in Teams admin center.

To know more, see how to manage app setup policies.

Custom app policies

Teams allows developers within your organization to build, test, and deploy custom apps for organization's internal users. Developers can submit their custom apps via Teams for approval from Teams admins. You can use app setup policies to control who in your organization can upload custom apps. Admins can allow their organization's end-users to use custom app and developers to upload custom apps, using the Org-wide app settings.

Screenshot that shows how to allow custom apps in your organization in the org-wide settings panel.

To know more, see how to manage custom app policies and settings.