Tutorial / Cram Notes
Org-wide app settings in Microsoft Teams allow administrators to manage how apps are used within their organization. This includes the ability to allow or block apps, set up policies to control who can install them, and configure the tenant-wide settings that dictate app behavior.
How to Manage Apps at the Tenant Level
Administrators can manage apps in Microsoft Teams from the Microsoft Teams admin center. To do this, navigate to the “Teams apps” section in the admin center, where you can find options like “Manage apps,” “Permission policies,” “Setup policies,” and “Custom app policies and settings.”
Manage Apps
Here, you can view and control all apps available within your Teams tenant. You can search for specific apps and make decisions on whether to allow or block them. Actions include:
- Allowing an app for use within Teams.
- Blocking an app to prevent it from being used.
- Uploading a custom app for your organization.
Permission Policies
Permission policies define which types of apps users are allowed to interact with. For example, you can create a policy that only allows users to use Microsoft-published apps or another that allows third-party apps.
Examples of permission policy settings include:
- Allow all apps
- Allow Microsoft apps only
- Allow specific apps and block all others
- Block specific apps and allow all others
Setup Policies
Setup policies control the user experience by defining which apps are pinned to the Teams app bar for users by default. You can create different policies for different user groups based on their role or function within the organization.
An example setup policy might look like this:
| App Name | Pinned by Default | Mandatory Pin |
|---|---|---|
| Calendar | Yes | No |
| Tasks | No | No |
| Planner | Yes | Yes |
Custom App Policies and Settings
Custom app policies and settings allow you to configure tenant-wide settings that determine how apps behave. For example, you can enable or disable side-loading of custom apps, configure the tenant app catalog, and manage org-wide app settings like allowing external apps or enabling the Microsoft Teams Store.
Examples of Managing Org-wide App Settings
Example 1: Blocking an Unwanted App
- Go to the “Manage apps” section.
- Find the app you want to block.
- Change the status to “Blocked.”
Example 2: Creating a Custom Permission Policy
- Navigate to “Permission policies.”
- Add a new policy.
- Select “Allow Microsoft apps only.”
- Assign the policy to users or groups.
Example 3: Pinning Apps with Setup Policies
- Go to “Setup policies.”
- Create or edit a policy.
- Add Planner to the list of pinned apps.
- Make it mandatory if required.
- Assign the policy to users or groups.
Best Practices for Managing Org-wide App Settings
- Review new and existing apps regularly to ensure they comply with organizational policies and standards.
- Create app permission policies that reflect user roles and needs.
- Use setup policies to streamline the user experience and promote productivity tools.
- Communicate changes in app settings and policies with end-users to manage expectations and adoption.
Conclusion
Managing org-wide app settings is an essential component of MS-700: Managing Microsoft Teams exam and for administrators who oversee Teams environments. It involves understanding and navigating through the Teams admin center to implement policies that align with organizational goals and regulatory requirements. By controlling app availability, app behavior, and the overall setup within Teams, administrators can maintain a secure and efficient environment that leverages the full potential of Microsoft Teams.
Practice Test with Explanation
True or False: In Microsoft Teams, only global administrators can manage org-wide app settings.
- False
Global administrators along with Teams service administrators, and Teams communications administrators can manage org-wide app settings.
You can restrict a specific third-party app from being used across the entire organization through the Teams admin center.
- A) True
- B) False
A) True
In the Teams admin center, admins can manage app permission policies to allow or block specific apps for the entire organization.
True or False: Microsoft Teams allows admins to pre-install certain apps for users organization-wide.
- True
Teams allows administrators to set up policies to pre-install apps that will then be available for all users by default.
Which role is NOT typically responsible for managing org-wide app settings in Teams?
- A) Teams service administrator
- B) Teams communications administrator
- C) Global reader
- D) Global administrator
C) Global reader
The global reader role is designed for users who need to view but not manage configurations. They cannot change org-wide app settings.
True or False: It is mandatory to include third-party apps in the Teams app setup policies.
- False
Including third-party apps in app setup policies is optional, and organizations can choose to include them based on their specific needs and policies.
In which section of the Teams admin center can you configure org-wide settings for apps?
- A) Users
- B) Teams apps
- C) Messaging policies
- D) Meetings
B) Teams apps
Org-wide app settings are managed under the “Teams apps” section in the Teams admin center.
Which policy in Microsoft Teams restricts the ability to upload custom apps?
- A) Teams update policies
- B) Teams app setup policies
- C) Teams app permission policies
- D) Teams app setup and permission policies
C) Teams app permission policies
Teams app permission policies are used to control what apps are available to Teams users, including the ability to upload custom apps.
True or False: The default app permission policy in Microsoft Teams automatically allows all Microsoft apps but blocks all third-party apps.
- False
The default app permission policy in Teams allows users to access all Microsoft-published apps as well as third-party apps, unless an admin has modified this policy.
Microsoft Teams provides the feature to publish custom apps to the entire organization directly from the Teams admin center.
- A) True
- B) False
A) True
Teams provides the ability to distribute custom apps across the organization by publishing them directly through the Teams admin center.
To create a custom app policy in Microsoft Teams, you need to have one of the following roles EXCEPT:
- A) Global administrator
- B) User management administrator
- C) Teams service administrator
- D) Teams communications administrator
B) User management administrator
The user management administrator role does not have the capabilities to manage Teams app settings. This role is limited to user account management tasks.
True or False: External apps can be configured to require admin approval before being added to Microsoft Teams.
- True
Admins can configure app permission policies to require that new external apps are approved before being added to Teams.
Which feature must be enabled for a Microsoft Teams admin to sideload apps for testing purposes?
- A) Third-party apps
- B) Custom app uploading
- C) Developer previews
- D) Global app distribution
B) Custom app uploading
Custom app uploading must be enabled to allow admins or developers to sideload apps in Teams for testing before making them available org-wide.
Interview Questions
What are Org-wide app settings in Microsoft Teams?
Org-wide app settings are a set of policies that govern the behavior of apps used in Teams across an organization.
How can an admin access Org-wide app settings?
An admin can access Org-wide app settings by signing in to the Microsoft Teams admin center and going to the “Teams apps” section.
What are some of the settings that can be configured in Org-wide app settings?
Some of the settings that can be configured in Org-wide app settings include app permission policies, app setup policies, app permission requests, and app setup policy settings.
What is an app permission policy in Org-wide app settings?
An app permission policy is a setting that controls which apps can be installed by users in the organization and the permissions they have to access and interact with other apps.
What is an app setup policy in Org-wide app settings?
An app setup policy is a setting that controls the default behavior of an app when it’s installed by users in the organization. For example, an admin can set a default tab configuration or default messaging behavior for an app.
How can an admin restrict the installation of specific apps in the organization?
An admin can restrict the installation of specific apps in the organization by creating an app permission policy that only allows approved apps to be installed.
How can an admin configure the settings for a specific app in the organization?
An admin can configure the settings for a specific app in the organization by creating an app setup policy for that app and defining the default behavior and settings.
What is the difference between an app permission policy and an app setup policy in Org-wide app settings?
An app permission policy controls which apps can be installed and the permissions they have, while an app setup policy controls the default behavior and settings of an app after it’s installed.
Can an admin customize the settings for different teams or users in the organization?
Yes, an admin can customize the settings for different teams or users in the organization by creating different app permission and setup policies and applying them to specific teams or users.
What happens when an admin updates an app permission or setup policy in Org-wide app settings?
When an admin updates an app permission or setup policy in Org-wide app settings, the new settings are applied to all users in the organization who are affected by the policy.
How can an admin view the status of app installation and usage in the organization?
An admin can view the status of app installation and usage in the organization by going to the “App usage” section in the Microsoft Teams admin center.
Can an admin disable a specific app for a user or team in the organization?
Yes, an admin can disable a specific app for a user or team in the organization by going to the “Teams apps” section in the Microsoft Teams admin center and removing the app from the allowed apps list.
What happens when an app is removed from the allowed apps list in Org-wide app settings?
When an app is removed from the allowed apps list in Org-wide app settings, it can no longer be installed or used by users in the organization.
Can an admin enable or disable the ability for users to upload custom apps in the organization?
Yes, an admin can enable or disable the ability for users to upload custom apps in the organization by creating an app permission policy that allows or blocks custom app upload.
How can an admin troubleshoot issues with apps in the organization?
An admin can troubleshoot issues with apps in the organization by going to the “App health” section in the Microsoft Teams admin center and reviewing app usage, error logs, and other data to identify and resolve issues.
Is there any way to restrict an app to specific teams or users within the organization?
Thanks
I’m having trouble understanding how to configure app setup policies. Any advice?
Great insights, but I still find it a bit complicated to manage app permissions across a large team.
Does anyone know how to block specific apps from being used in Teams?
Is there a way to monitor app usage across the organization in Teams?
How do we update an app that requires Org-wide approval?
App management in Teams is too complicated for end users.