Manage User Access to Apps for Outlook

Topic Last Modified: 2013-02-22

You can use the EAC or the Shell to manage user access to apps for Outlook.

Using the EAC, you can manage basic app access settings for your users at an organizational level. For example, you can configure whether an app is enabled or disabled for your users. You can also specify whether an app is required or optional for your users.
With the Shell, you can manage all the settings that you can with the EAC, as well as other settings. For example, you can limit availability to specific users in your organization.

For additional management tasks related to apps for Outlook, see Apps for Outlook.

What do you need to know before you begin?

Estimated time to complete: 5 minutes.
You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the "Apps for Outlook” entry in the Recipients Permissions topic.
For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard Shortcuts in the Exchange Admin Center.

Tip:
Having problems? Ask for help in the Exchange forums. Visit the forums at: Exchange Server, Exchange Online, or Exchange Online Protection.

In the EAC, navigate to Organization > Apps.
In the list view, select the app that you want to change settings for, and then click Edit .
If you don’t want your users to use the app, clear the Make this app available to users in your organization check box, and then click Save.
If you want your users to be able to use the app, select Make this app available to users in your organization, and then select the option you want.
- Optional, enabled by default Use this setting if you want to allow your users to turn off the app.
- Optional, disabled by default Use this setting if you want to allow your users to turn on the app.
- Mandatory, always enabled. Users can’t disable this app Use this setting if you don’t want your users to turn off the app.
Click Save.

You can use the Shell to specify whether an app is available, enabled, or disabled.

Note:
Run the following command to look up the display names and application IDs for all the apps for Outlook installed for your organization. `Get-App -OrganizationApp \|FL DisplayName,AppID`

If you want an app to be disabled and hidden from all your users, run the following command.

	Copy Code
Set-App -OrganizationApp -Identity <App ID> -Enabled:$false

If you want the app to be enabled by default, but you want your users to be able to turn it off, run the following command.

	Copy Code
Set-App -OrganizationApp -Identity <App ID> -Enabled:$true DefaultStateForUser Enabled

If you want the app to be disabled by default, but you want your users to be able to turn it on, run the following command.

	Copy Code
Set-App -OrganizationApp -Identity <App ID> -Enabled:$true DefaultStateForUser Disabled

If you want the app to be required for your users, run the following command.

	Copy Code
Set-App -OrganizationApp -Identity <App ID> -Enabled:$true DefaultStateForUser AlwaysEnabled

For detailed syntax and parameters, see Set-App.

If you want only members of your Marketing team distribution list to be able to use the LinkedIn app, run the following commands.

	Copy Code
$a= Get-DistributionGroupMember Marketing

	Copy Code
Set-App -Identity <App ID for the LinkedIn app> -ProvidedTo SpecificUsers -UserList $a -DefaultStateForUser Enabled

For detailed syntax and parameters, see Set-App.

To verify that you’ve successfully limited access for specific users, do the following: