使用 Microsoft Intune 將應用程式指派給群組Assign apps to groups with Microsoft Intune

當您已新增應用程式到 Microsoft Intune 之後,就可以將該應用程式指派給使用者和裝置。After you've added an app to Microsoft Intune, you can assign the app to users and devices. 請務必注意不論裝置是否由 Intune 管理,您都可以將應用程式指派給該裝置。It is important to note that you can assign an app to a device whether or not the device is managed by Intune.

下表列出指派應用程式給使用者和裝置的各種選項:The following table lists the various options for assigning apps to users and devices:

  向 Intune 註冊的裝置Devices enrolled with Intune 未向 Intune 註冊的裝置Devices not enrolled with Intune
指派給使用者Assign to users Yes Yes
指派給裝置Assign to devices Yes No
指派已包裝的應用程式或包含 Intune SDK (適用於應用程式保護原則) 的應用程式Assign wrapped apps or apps that incorporate the Intune SDK (for app protection policies) Yes Yes
將應用程式指派為可用Assign apps as Available Yes Yes
將應用程式指派為必要項目Assign apps as Required Yes No
解除安裝應用程式Uninstall apps Yes No
從 Intune 接收應用程式更新Receive app updates from Intune Yes No
使用者從公司入口網站應用程式安裝可用的應用程式End users install available apps from the Company Portal app Yes No
使用者從 Web 型公司入口網站安裝可用的應用程式End users install available apps from the web-based Company Portal Yes Yes

注意

目前,您可以將 iOS 和 Android 應用程式 (企業營運和市集購買的應用程式) 指派給未向 Intune 註冊的裝置。Currently, you can assign iOS and Android apps (line-of-business and store-purchased apps) to devices that aren't enrolled with Intune.

若要在未向 Intune 註冊的裝置上接收應用程式更新,裝置使用者必須移至其組織的 [公司入口網站],並手動安裝應用程式更新。To receive app updates on devices that aren't enrolled with Intune, device users must go to their organization's Company Portal and manually install app updates.

指派應用程式To assign an app

  1. 登入 Azure 入口網站Sign in to the Azure portal.

  2. 選取 [所有服務] > [Intune]。Select All services > Intune. Intune 位於 [Monitoring + Management] (監視 + 管理) 區段。Intune is located in the Monitoring + Management section.

  3. 在 [Intune] 功能表中,選取 [行動應用程式]。In the Intune menu, select Mobile apps.

  4. 在功能表的 [管理] 區段,選取 [應用程式]。In the Manage section of the menu, select Apps.

  5. 在 [應用程式] 窗格中,選取您想要指派的應用程式。In the Apps pane, select the app you want to assign.

  6. 在功能表的 [管理] 區段中,選取 [指派]。In the Manage section of the menu, select Assignments.

  7. 選取 [新增群組],以開啟和應用程式相關的 [新增群組] 窗格。Select Add Group to open the Add group pane that is related to the app.

  8. 針對特定的應用程式,選取 [指派類型]:For the specific app, select an assignment type:

    • 可透過已註冊裝置使用:使用者從公司入口網站應用程式或網站中安裝應用程式。Available for enrolled devices: Users install the app from the Company Portal app or website.

    • 無論註冊與否均可使用:將此應用程式指派到其裝置未向 Intune 註冊的使用者群組。Available with or without enrollment: Assign this app to groups of users whose devices are not enrolled with Intune. 來自受控 Google Play 的應用程式不支援此選項。Apps from Managed Google Play don't support this option.

    • 必要:此應用程式會安裝在所選群組中的裝置上。Required: The app is installed on devices in the selected groups.

    • 解除安裝:此應用程式會從所選群組中的裝置上解除安裝。Uninstall: The app is uninstalled from devices in the selected groups.

      注意

      僅限 iOS 應用程式:如果您已建立包含個別應用程式 VPN 設定的 iOS VPN 設定檔,便可以在 [VPN] 下選取該 VPN 設定檔。For iOS apps only: If you have created an iOS VPN profile that contains per-app VPN settings, you can select the VPN profile under VPN. 應用程式執行時,即會開啟 VPN 連線。When the app is run, the VPN connection is opened. 如需詳細資訊,請參閱 iOS 裝置的 VPN 設定For more information, see VPN settings for iOS devices.

  9. 若要選取受此應用程式指派影響的使用者群組,請選取 [包含的群組]。To select the groups of users that are affected by this app assignment, select Included Groups.

  10. 當您選取要包含的一個或多個群組之後,選取 [選取]。After you have selected one or more groups to include, select Select.

  11. 在 [指派] 窗格中,選取 [確定] 來完成包含群組選取項目。In the Assign pane, select OK to complete the included groups selection.

  12. 如果您想要將任何使用者群組排除,使他們不受此應用程式指派影響,請選取 [排除群組]。If you want to exclude any groups of users from being affected by this app assignment, select Exclude Groups.

  13. 如果您選擇要排除任何群組,請在 [選取群組] 中,選取 [選取]。If you have chosen to exclude any groups, in Select groups, select Select.

  14. 在 [新增群組] 窗格中,選取 [確定]。In the Add group pane, select OK.

  15. 在應用程式 [指派] 窗格中,選取 [儲存]。In the app Assignments pane, select Save.

該應用程式現在已經指派給您所選取的群組。The app is now assigned to the groups that you selected. 如需包含和排除應用程式指派的詳細資訊,請參閱包含與排除應用程式指派For more information about including and excluding app assignments, see Include and exclude app assignments.

如何解決應用程式用途之間的衝突How conflicts between app intents are resolved

有時候,相同的應用程式會指派給多個群組,但使用不同的用途。Sometimes, the same app is assigned to multiple groups but with different intents. 當發生此情況時,下表中的資訊可協助您了解產生的用途:The information in the following table can help you understand the resulting intent when this occurs:

群組 1 用途Group 1 intent 群組 2 用途Group 2 intent 產生的用途Resulting intent
使用者為必要User Required 使用者可用User Available 必要且可用Required and Available
使用者為必要User Required 使用者無法使用User Not Available 必要Required
使用者為必要User Required 使用者解除安裝User Uninstall 必要Required
使用者可用User Available 使用者無法使用User Not Available 無法使用Not Available
使用者可用User Available 使用者解除安裝User Uninstall 解除安裝Uninstall
使用者無法使用User Not Available 使用者解除安裝User Uninstall 解除安裝Uninstall
使用者為必要User Required 裝置為必要Device Required 同時存在,閘道處理為必要Both exist, Gateway treats Required
使用者為必要User Required 裝置解除安裝Device Uninstall 同時存在,閘道解析為必要Both exist, Gateway resolves Required
使用者可用User Available 裝置為必要Device Required 同時存在,閘道解析為必要 (必要且可用)Both exist, Gateway resolves Required (Required and Available)
使用者可用User Available 裝置解除安裝Device Uninstall 同時存在,閘道解析可用。Both exist, Gateway resolves Available.

應用程式在 [公司入口網站] 中顯示。App shows up in the Company Portal.

如果已經安裝該應用程式 (如含上一個用途的必要應用程式),會將該應用程式解除安裝。If the app is already installed (as a required app with previous intent), the app is uninstalled.

如果使用者選取 [從公司入口網站安裝],會安裝該應用程式,而不會接受解除安裝的用途。If the user selects Install from the Company Portal, the app is installed, and the uninstall intent is not honored.
使用者無法使用User Not Available 裝置為必要Device Required 必要Required
使用者無法使用User Not Available 裝置解除安裝Device Uninstall 解除安裝Uninstall
使用者解除安裝User Uninstall 裝置為必要Device Required 同時存在,閘道解析為必要Both exist, Gateway resolves Required
使用者解除安裝User Uninstall 裝置解除安裝Device Uninstall 同時存在,閘道解析解除安裝Both exist, Gateway resolves Uninstall
裝置為必要Device Required 裝置解除安裝Device Uninstall 必要Required
使用者為必要且可用User Required and Available 使用者可用User Available 必要且可用Required and Available
使用者為必要且可用User Required and Available 使用者解除安裝User Uninstall 必要且可用Required and Available
使用者為必要且可用User Required and Available 使用者無法使用User Not Available 必要且可用Required and Available
使用者為必要且可用User Required and Available 裝置為必要Device Required 同時存在,必要且可用Both exist, Required and Available
使用者為必要且可用User Required and Available 裝置無法使用Device Not Available 必要且可用Required and Available
使用者為必要且可用User Required and Available 裝置解除安裝Device Uninstall 同時存在,閘道解析為必要 (必要且可用)Both exist, Gateway resolves Required (Required and Available)
使用者無法使用User Not Available 裝置無法使用Device Not Available 無法使用Not Available
使用者可用User Available 裝置無法使用Device Not Available 可用Available
使用者為必要User Required 裝置無法使用Device Not Available 必要Required
使用者可用而無需註冊User Available without enrollment 使用者為必要且可用User Required and Available 必要且可用Required and Available
使用者可用而無需註冊User Available without enrollment 使用者為必要User Required 必要Required
使用者可用而無需註冊User Available without enrollment 使用者無法使用User Not Available 無法使用Not Available
使用者可用而無需註冊User Available without enrollment 使用者可用User Available 可用Available
使用者可用而無需註冊User Available without enrollment 裝置為必要Device Required 必要且可用而無需註冊Required and Available without enrollment
使用者可用而無需註冊User Available without enrollment 裝置無法使用Device Not Available 可用而無需註冊Available without enrollment
使用者可用而無需註冊User Available without enrollment 裝置解除安裝Device Uninstall 解除安裝且可用而無需註冊。Uninstall and Available without enrollment.

如果使用者未從公司入口網站安裝應用程式,會接受解除安裝。If the user didn’t install the app from the Company Portal, the uninstall is honored.

如果使用者從公司入口網站安裝應用程式,則安裝將優先於解除安裝。If the user installs the app from the Company Portal, the install is prioritized over the uninstall.

注意

僅針對受控 iOS 市集應用程式,當您將這些應用程式新增到 Microsoft Intune 並指派為必要時,系統會自動將它們建立成包含必要可用用途。For managed iOS store apps only, when you add these apps to Microsoft Intune and assign them as Required, the apps are automatically created with both Required and Available intents.

以必要用途為目標的 iOS 市集應用程式 (不是 iOS VPP 應用程式) 會在裝置簽入時於裝置上強制執行,而且也會顯示在公司入口網站應用程式中。iOS Store apps (not iOS VPP apps) that are targeted with required intent will be enforced on the device at the time of the device check-in and will also show in the Company Portal app.

接下來的步驟Next steps

若要深入了解監視應用程式指派,請參閱如何監視應用程式To learn more about monitoring app assignments, see How to monitor apps.