Specify the Administrators and Users Who Can Install and Manage Apps for Outlook

Topic Last Modified: 2013-02-25

You can specify which administrators in your organization have permissions to install and manage apps for Outlook. You can also specify which users in your organization have permission to install and manage apps for their own use.

There are four built-in management roles that you use to assign these permissions to individual users or security groups.

Administrative roles

Org Marketplace Apps Enables an administrator to install and manage apps that are available from the Office Store for their organization.
Org Custom Apps Enables an administrator to install and manage custom apps for their organization.

User roles

My Marketplace Apps Enables a user to install and manage Office Store apps for their own use.
My Custom Apps Enables a user to install and manage custom apps for their own use.

For information about each of these roles, see Org Marketplace Apps Role, Org Custom Apps Role, My Marketplace Apps Role, and My Custom Apps Role.

For information about apps for Outlook, see Apps for Outlook.

What do you need to know before you begin?

Estimated time to complete: 5 minutes.
You need to be assigned permissions before you can run this cmdlet. Although all parameters for this cmdlet are listed in this topic, you may not have access to some parameters if they're not included in the permissions assigned to you. To see what permissions you need, see the "Role assignments" entry in the Role Management Permissions topic.
For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.

Tip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection.

What do you want to do?

Assign administrators the permissions required to install and manage apps for your organization

Use the EAC to assign permissions to administrators

You can use the EAC to assign administrators the permissions required to install and manage apps that available from the Office Store for your organization. For detailed information about how to do this, see Manage Role Groups.

Use the Shell to assign permissions to administrators

This example assigns administrator Tony Smith (TonySmith) the permissions required to install and manage apps that are available from the Office Store for your organization.

	Copy Code
New-ManagementRoleAssignment -Role "Org Marketplace Apps" -User TonySmith

This example assigns members of the Store App Admins security group (StoreAppAdmins) the permissions required to install and manage Office Store apps for your organization.

	Copy Code
New-ManagementRoleAssignment -Role "Org Marketplace Apps" -SecurityGroup StoreAppAdmins

This example assigns administrator Tony Smith (TonySmith) the permissions required to install custom apps for your organization.

	Copy Code
New-ManagementRoleAssignment -Role "Org Custom Apps" -User TonySmith

This example assigns members of the Custom App Admins security group (CustomAppAdmins) the permissions required to install custom apps for your organization.

	Copy Code
New-ManagementRoleAssignment -Role "Org Custom Apps" -SecurityGroup CustomAppAdmins

For more information about syntax and parameters, see New-ManagementRoleAssignment.

Assign users the permissions required to install and manage apps for their own use

Use the EAC to assign permissions to users

You can use the EAC to assign users the permissions required to view and modify custom apps for their own use. For detailed information about how to do this, see Manage Role Groups.

Use the Shell to assign permissions to users

This example assigns users Tony Smith (TonySmith) and Adam Barr (AdamBarr) the permissions required to install apps from the Office Store for their own use.

	Copy Code
New-ManagementRoleAssignment -Role "My Marketplace Apps" -UserList TonySmith,AdamBarr

This example assigns members of the Store App Users security group (Store AppUsers) the permissions required to install apps from the Office Store for their own use.

	Copy Code
New-ManagementRoleAssignment -Role "My Marketplace Apps" -SecurityGroup StoreAppUsers

This example assigns user Tony Smith (TonySmith) the permissions required to install custom apps for his own use.

	Copy Code
New-ManagementRoleAssignment -Role "My Custom Apps" -User TonySmith

This example assigns users of the Custom App Users (CustomAppUsers) the permissions required to install custom apps for their own use.

	Copy Code
New-ManagementRoleAssignment -Role "My Custom Apps" -SecurityGroup CustomAppUsers

For more information about syntax and parameters, see New-ManagementRoleAssignment.

How do you know this worked?

To verify that you’ve successfully assigned permissions for a user, run a Shell command using the format Get-ManagementRoleAssignment -Role <Role Name> -GetEffectiveUsers, where Role Name is the role for which you want to verify assigned permissions.

This example shows you how to verify whom you’ve assigned permissions to install apps from the Office Store for the organization.

Run Get-ManagementRoleAssignment -Role "Org Marketplace Apps" -GetEffectiveUsers.
In the results, review the entries in the Effective Users column.

For more information about syntax and parameters, see Get-ManagementRoleAssignment.