Azure AVD Remote Apps for external Users

Question

Hi I'm stuck on deploying remote Apps for external Users, I have the following scenarios.

My scenarios:

Our customer (we are an IT-Provider) has customers which need to work in a software which is deployed in Azure AVD. So I want to invite these users with guest Accounts in order for them to be able to log in into our external workspace to use our customer's software which is deployed as Remote Apps.

Microsoft's example:

A software vendor called Contoso might use Azure Virtual Desktop to sell remote streams of Contoso’s productivity app to Contoso’s customers (external users). Because Contoso is serving external users, Contoso must enroll in Azure Virtual Desktop’s per-user access pricing. This enables Contoso to pay for Azure Virtual Desktop access rights on behalf of those external users who connect to Contoso's deployment. The users don't need a separate license like Microsoft 365 to access Azure Virtual Desktop. Contoso still needs to create and manage identities for those external users.

I have already done what's said in following articles.

https://learn.microsoft.com/en-us/azure/virtual-desktop/remote-app-streaming/architecture-recs

https://learn.microsoft.com/en-us/azure/active-directory/external-identities/external-identities-overview

I have enabled Per User access pricing in Azure and invited the external users. I gave the following roles to a group I created for the external users.

-Desktop Virtualization Contributor

-Virtual Machine User Login

The users are able to log in to the workspace, but cant see any apps, nor the desktop. Can someone help me find the issue.

Thanks in advance

Regards

Answer 1

Hi Hansen,

I assume your session hosts are Azure AD joined and not ADDS joined? The accounts which the external users would need, have to be on your Azure AD. It is not currently supported to use Azure AD B2B (guest accounts) to connect into your AVD environment.

This is a highly requested feature and is high on the roadmap for this year.

Hope this helps

Answer 2

Hi,

From your description it doesn't sound like you assigned the users to the Application Group(s). You can do this in the Azure portal by navigating to Azure Virtual Desktop -- Application groups -- <yourAppGroup> -- Assignments -- Add.

If the above was useful please click Accept Answer.

Thanks.

-TP