Know how to manage access to and install Teams apps

Microsoft Teams uses app policies to govern access to and use of all apps and upload of custom apps. App policies help Teams Administrator and Global Administrators control the following app behavior:

  • Configure the access of apps for each individual user or for a group of users. You control the apps that each user can use.

  • Pin the allowed apps for the desired users. Also, admins can install apps for users without user intervention. It helps users easily get started with the relevant apps.

  • Allow or disallow upload and use of custom apps for a few or all the users.

As an alternate, you can use app centric management to configure the access to apps on a per-app basis. The app centric management feature let admins specify the users and group in their organization who can add Teams apps on a per-app basis, instead of relying on permission policies.

App permission policies


If your organization is using app centric management feature to manage access to apps, see Manage access to Teams apps using app centric management. Permission policies don't apply and you may see this message on the policy page.

Screenshot showing the permissions policy change for organization that are using app centric management.

With app permission policies, Teams admin control what apps are available to each user in their organization. You can allow a few apps for all users, you can allow a few apps for a specific group of users, or you can allow specific apps for specific users. App permission policies work in tandem with Org-wide app settings and allow or block status of each individual app.

The app permission policies apply to all the types of apps available in Teams. Some example scenarios in which you use app permission policies are:

  • Gradually roll out an app to some users initially and to all users eventually.
  • Allow a custom app for recruiting and talent management for only members of your HR department and block it for all other organization users.

Screenshot of app permission policy.

To learn more, see how to manage app permission policies.

App setup policies

App setup policies let you configure how and where are apps available for users in their Teams client. You choose the apps that you want to pin to the app bar in the Teams clients and define the order in which apps are displayed.

Pinning or installing apps helps drive awareness and adoption of the desired apps in your organization. The changes apply to web, desktop, and mobile Teams clients.

Some example scenarios in which you use app setup policies are:

  • Pin a custom recruiting and talent management app for members of your HR team.
  • Change the order of the Core apps using pinning for your organization's users.

Screenshot of app setup policy in Teams admin center.

To know more, see how to manage app setup policies.

Option to upload custom apps

Your organization may commission the creation of custom apps for org-specific requirements. Developers within your organization can build, test, and deploy custom apps for organization's internal users of Teams. You use app setup policy to control who in your organization can upload custom apps. You use Org-wide app settings to allow users to use custom apps. You use permission policies to allow only specific users to use a custom app.

Screenshot that shows how to allow custom apps in your organization in the Org-wide app settings panel.

To know more, see how to manage custom apps.