如何使用 Microsoft Intune 管理透過大量採購方案購買的 iOS 應用程式How to manage iOS apps you purchased through a volume-purchase program with Microsoft Intune

適用於︰Azure 上的 IntuneApplies to: Intune on Azure
您需要傳統主控台中之 Intune 的相關文件嗎?Looking for documentation about Intune in the classic console? 請移至這裡Go to here.

iOS App Store 可讓您購買多個想要在公司內執行的應用程式授權。The iOS app store lets you purchase multiple licenses for an app that you want to run in your company. 購買多個應用程式複本可協助您降低追蹤多個所購買應用程式複本的管理開銷。Purchasing multiple copies of an app helps you reduce the administrative overhead of tracking multiple purchased copies of apps.

Microsoft Intune 可藉由下列方式協助您管理透過此方案所購買的應用程式:Microsoft Intune helps you manage apps that you purchased through this program by:

  • 從應用程式市集匯入授權資訊Importing the license information from the app store
  • 追蹤您已經使用多少個授權Tracking how many of the licenses you have used
  • 避免您安裝超過擁有數目的應用程式複本Preventing you from installing more copies of the app than you own

您可以使用兩種方法來指派大量採購的應用程式:There are two methods you can use to assign volume-purchased apps:

裝置授權Device licensing

當您將一個應用程式指派給多部裝置時,會使用一個應用程式授權,並與您指派的目標裝置保持關聯。When you assign an app to devices, one app license is used, and remains associated with the device to which you assigned it. 當您將大量採購的應用程式指派給一部裝置時,裝置的終端使用者不需要提供 Apple ID 來存取市集。When you assign volume-purchased apps to a device, the end user of the device does not have to supply an Apple ID to access the store.

使用者授權User licensing

當您將一個應用程式指派給多位使用者時,會使用一個應用程式授權,並與使用者相關聯。When you assign an app to users, one app license is used for and is associated with the user. 該應用程式可以在使用者擁有的多部裝置上執行。The app can be run on multiple devices that the user owns. 當您將大量採購的應用程式指派給多位使用者時,每位終端使用者都必須具備有效的 Apple ID,才能存取 App Store。When you assign a volume-purchased app to users, each end user must have a valid Apple ID in order to access the app store.

此外,針對從 Apple 大量採購方案市集購買的書籍,您可以使用 Intune 來進行同步處理、管理及指派。Additionally, you can synchronize, manage, and assign books you purchased from the Apple volume-purchase program store with Intune. 使用 Intune 入口網站中的 [書籍] 工作負載來管理書籍。Use the Books workload in the Intune portal to manage books. 管理書籍的程序與管理應用程式的程序相同。The procedures to manage books are the same as you use for managing apps. 您必須已經上傳 Apple 大量採購方案權杖才能開始。You must have uploaded an Apple Volume Purchase Program token before you start. 目前,您僅能以 [必要] 安裝來指派書籍。Currently, you can only assign books as a Required install. 當您將書籍指派給裝置時,該裝置必須已安裝內建的 iBooks 應用程式。When you assign a book to a device, that device must have the built-in iBooks app installed. 如果未安裝,則終端使用者必須重新安裝該應用程式才能閱讀書籍。If it is not, the end user must reinstall the app in order to read the book. 您目前無法使用 Intune 來還原已移除的內建應用程式。You cannot currently use Intune to restore removed built-in apps.

管理大量採購的 iOS 裝置應用程式Manage volume-purchased apps for iOS devices

請透過商務 Apple 大量採購方案教育 Apple 大量採購方案,購買多份 iOS 應用程式授權。Purchase multiple licenses for iOS apps through the Apple Volume Purchase Program for Business or the Apple Volume Purchase Program for Education. 這項程序包括從 Apple 網站設定 Apple VPP 帳戶,並將 Apple VPP 權杖上傳到 Intune。This process involves setting up an Apple VPP account from the Apple website and uploading the Apple VPP token to Intune. 您可以將您的大量採購資訊與 Intune 同步處理,並追蹤大量採購的應用程式使用情況。You can then synchronize your volume purchase information with Intune and track your volume-purchased app use.

開始之前Before you start

在開始之前,您必須從 Apple 取得 VPP 權杖,並將它上傳至您的 Intune 帳戶。Before you start, you need to get a VPP token from Apple and upload it to your Intune account. 此外,您還應該了解下列準則︰Additionally, you should understand the following criteria:

  • 您可將多份大量採購方案的權杖,與 Intune 帳戶相關聯。You can associate multiple volume-purchase program tokens with your Intune account.
  • 之前如有其他產品已使用過 VPP 權杖,您必須產生新的權杖來搭配 Intune 使用。If you previously used a VPP token with a different product, you must generate a new one to use with Intune.
  • 每個權杖有效期限為一年。Each token is valid for one year.
  • Intune 預設與 Apple VPP 服務一天進行兩次同步處理。By default, Intune syncs with the Apple VPP service twice a day. 您可以在任何時間啟動手動同步處理。You can start a manual sync at any time.
  • 在您將 VPP 權杖匯入到 Intune 之後,請不要將相同的權杖匯入到任何其他裝置管理解決方案。After you have imported the VPP token to Intune, do not import the same token to any other device management solution. 這樣做會導致授權指派與使用者記錄遺失。Doing so might result in the loss of license assignment and user records.
  • 開始搭配 Intune 使用 iOS VPP 之前,請移除任何以其他行動裝置管理 (MDM) 廠商所建立的現有 VPP 使用者帳戶。Before you start to use iOS VPP with Intune, remove any existing VPP user accounts created with other mobile device management (MDM) vendors. 基於安全性考量,Intune 不會把這些使用者帳戶同步處理到 Intune。Intune does not synchronize those user accounts into Intune as a security measure. Intune 只會同步處理 Intune 所建立的 Apple VPP 服務資料。Intune only synchronizes data from the Apple VPP service that Intune created.
  • Intune 支援新增最多 256 個 VPP 權杖。Intune supports adding up to 256 VPP tokens.
  • 如果您為透過裝置註冊設定檔或 Apple Configurator 註冊的裝置,指派大量採購的應用程式,只有以裝置為目標的應用程式會運作。If you assign a volume-purchased app for a device enrolled through a Device Enrollment Profile or Apple Configurator, only apps that are targeted to devices work. 您無法將大量採購的應用程式目標設為 DEP 裝置的使用者,DEP 裝置沒有任何使用者親和性。You cannot target volume-purchased apps to users of a DEP device, which does not have any user affinity.
  • VPP 權杖只支援一次用於一個 Intune 帳戶。A VPP token is only supported for use on one Intune account at a time. 請勿將相同的 VPP 權杖重複用於多個 Intune 租用戶。Do not reuse the same VPP token for multiple Intune tenants.
  • 當您使用使用者授權模型指派 VPP 應用程式給使用者或裝置 (具有使用者親和性) 時,每個 Intune 使用者在裝置上接受 Apple 條款和條件時,都必須與唯一的 Apple ID 或電子郵件地址建立關聯。When you assign VPP apps using the user licensing model to users or devices (with user affinity), each Intune user needs to be associated with a unique Apple ID or an email address when they accept the Apple terms and conditions on their device. 請確定當您為新 Intune 使用者設定裝置時,您用該使用者的唯一 Apple ID 或電子郵件地址來進行設定。Ensure that when you set up a device for a new Intune user, you configure it with that users unique Apple ID or email address. Apple ID 或電子郵件地址和 Intune 使用者形成唯一的組合,並可以用於多達 5 部裝置。The Apple ID or email address and Intune user form a unique pair and can used on up to 5 devices.

取得並上傳 Apple VPP 權杖To get and upload an Apple VPP token

  1. 登入 Azure 入口網站。Sign into the Azure portal.
  2. 選擇 [更多服務] > [監視 + 管理] > [Intune]。Choose More Services > Monitoring + Management > Intune.
  3. 在 [Intune] 刀鋒視窗上,選擇 [行動應用程式]。On the Intune blade, choose Mobile apps.
  4. 在 [行動應用程式] 工作負載中,選擇 [安裝] > [iOS VPP 權杖]。In the Mobile Apps workload, choose Setup > iOS VPP Tokens.
  5. 在 [VPP 權杖清單] 刀鋒視窗中,按一下 [新增]。On the list of VPP tokens blade, click Add.
  6. 在 [新的 VPP 權杖] 刀鋒視窗中,指定下列資訊:On the New VPP Token blade, specify the following information:
    • VPP 權杖檔案 - 若您尚未註冊,請註冊商務大量採購方案或教育方案。VPP token file - If you haven't already, sign up for the Volume Purchase Program for Business or the program for Education. 註冊之後,請下載您帳戶的 Apple VPP 權杖,然後在這裡選取它。After you sign up, download the Apple VPP token for your account and select it here.
    • Apple ID - 輸入與大量採購方案相關聯之帳戶的 Apple ID。Apple ID - Enter the Apple ID of the account associated with the volume-purchase program.
    • VPP 帳戶類型 - 請選擇 [商務] 或 [教育]。Type of VPP account - Choose from Business or Education.
  7. 完成之後,請按一下 [上傳]。When you are done, click Upload.

該權杖會顯示在權杖清單刀鋒視窗內。The token is displayed in the list of tokens blade.

您可以隨時選擇 [立即同步處理],使用 Intune 同步處理 Apple 所儲存的資料。You can synchronize the data held by Apple with Intune at any time by choosing Sync now.

注意

Microsoft Intune 只會同步可透過 iTunes Store 公開取得之應用程式的資訊。Microsoft Intune only syncs information of Apps, which are publicly available through the iTunes Store. 尚不支援 iOS 的自訂 B2B 應用程式Custom B2B Apps for iOS are not yet supported. 如果您的案例以這類應用程式為目標,將不會同步應用程式資訊。If your scenario targets such apps, the app information is not synchronized.

指派大量採購應用程式To assign a volume-purchased app

  1. 在 [Mobile Apps] 工作負載中,選擇 [管理] > [應用程式授權]。In the Mobile Apps workload, choose Manage > App Licenses.
  2. 在應用程式清單刀鋒視窗中,選擇您要指派的應用程式,然後選擇 [...]On the list of apps blade, choose the app you want to assign, and then choose '...' > [指派群組]。 > Assign Groups.
  3. - [指派] 刀鋒視窗中,選擇 [管理] > [指派]。On the - Assignments blade, choose Manage > Assignments.
  4. 選擇 [選取群組],然後在 [選取群組] 刀鋒視窗中,選擇要指派該應用程式的 Azure AD 使用者或裝置群組。Choose Select Groups then, on the Select groups blade, choose the Azure AD user or device groups to which you want to assign the app.
  5. 針對您選取的每個群組,選擇下列設定:For each group you selected, choose the following settings:
    • 類型 - 選擇應用程式會是 可用必要Type - Choose whether the app will be Available (end users can install the app from the Company Portal), or Required (end users devices will automatically get the app installed). 當您將 VPP 應用程式指派為 [可用] 時,會直接從 App Store 指派應用程式內容和授權。When you assign a VPP app as Available, the app content and license are assigned directly from the app store.
    • 授權類型 - 選擇 [使用者授權] 或 [裝置授權]。License type - Choose from User licensing, or Device licensing.
  6. 完成之後,請選擇 [儲存]。Once you are done, choose Save.
注意

顯示的應用程式清單與權杖建立關聯。The list of apps displayed is associated with a token. 如果您的應用程式與多個 VPP 權杖建立關聯,您會看到相同的應用程式顯示多次;針對每個權杖各一次。If you have an app that is associated with multiple VPP tokens, you see the same app being displayed multiple times; once for each token.

進一步資訊Further information

若要回收授權,您必須將指派動作變更為「解除安裝」。To reclaim a license, you must change the assignment action to Uninstall. 在應用程式解除安裝之後,將會回收授權。The license will be reclaimed after the app is uninstalled.

當具有合格裝置的使用者第一次嘗試安裝 VPP 應用程式時,系統會要求他們加入 Apple 大量採購方案。When a user with an eligible device first tries to install a VPP app, they are asked to join the Apple Volume Purchase program. 他們必須加入,應用程式安裝才會繼續執行。They must join before the app installation proceeds. 對於加入 Apple 大量採購方案的邀請,需要使用者能夠在 iOS 裝置上使用 iTunes 應用程式。The invitation to join the Apple Volume Purchase program requires that the user can use the iTunes app on the iOS device. 如果您已經設定停用 iTunes Store 應用程式的原則,則 VPP 應用程式以使用者為基礎的授權將無法運作。If you have set a policy to disable the iTunes Store app, user-based licensing for VPP apps does not work. 解決方法是移除原則以允許 iTunes 應用程式,或是使用以裝置為基礎的授權。The solution is to either allow the iTunes app by removing the policy, or use device-based licensing.

後續步驟Next steps

請參閱如何監視應用程式,以取得協助您監視應用程式指派的資訊。See How to monitor apps for information to help you monitor app assignments.

若要提交意見反應,請前往 Intune Feedback