Microsoft Store for Business account syncing with Intune

Question

Hi folks Quick question which I've pondered on a few times in the past in respec of Microsoft Store for Business...what account does everyone use for the Microsoft Store for Business within Intune? By that I mean, do you use a separate dedicated account for Microsoft Store for Business and the one that you link Microsoft Store for Business to Intune? The reason I ask, is that once the account used for Microsoft Store for Business has been linked and is syncing with Intune, it then cannot be changed. Just wanted to know if anyone else uses a dedicated account for this and what permissions the account being used has as I've always used the admin identity I'm currently logged into Azure with. Your thoughts/suggestions/best practice on this, appreciated please. Thanks.

Answer 1

Hi,

When we associate the Microsoft Store for Business account with Intune, ensure that we sign into the Microsoft Store for Business using the same tenant account you use to sign into Intune. And ensure this is a Microsoft Store for Business Admin account which is used to shop for apps.

https://learn.microsoft.com/en-us/mem/intune/apps/windows-store-for-business

Answer 2

The user account used to set up the association between MSfB and Intune is irrelevant as long as this account is part of the correct role to do so (Azure AD Global Admin). There is no permanent link established using this user account and the user account is not used for any sync purposes. You can easily add users to the various roles required.

The reference in the documentation to "store account" is not a reference to a user account but to the store as a whole for your organization. Just like Microsoft has an account team for your organization because they handle your account which refers to all sales-related interactions between your organization and Microsoft.