Trying to install a custom teams app returns 403 response

Question

I created a Teams app, uploaded it to the organizations catalog, added it to the org global policy and am now trying to install it for a user using a POST to

https://graph.microsoft.com/v1.0/users/{userId}/teamwork/installedApps/

the response i'm getting is

{
        "code": "Forbidden",
        "message": "App is blocked by app permission policy. TenantId: xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxx, UserObjectId: xxxxxxx-xxxx-xxxx-xxxx-xxxxxxx, AppId: xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxx, AppType: Private"
}

I tried downloading a different app with the same token and it worked fine.

I can't seem to find any documentation regarding this error and it is not verbose enough to debug as it is, I have tried creating a new setup policy, add the app to the pinned apps on the org-wide policy and add it manually to a user, but nothing work.

I would very much appreciate any insight on this one

Answer 1

Hello @dan.schtechel,
Thank you for your inquiry about your Teams app development issue!
We are currently unable to reproduce the issue you’re experiencing.

The Manage apps page is where you allow or block individual apps at the org level. When you block or allow an app on the Manage apps page, that app is blocked or allowed for all users in your organization. When you block or allow an app in a Teams app permission policy, it's blocked or allowed for users who are assigned that policy.

Document Reference: https://docs.microsoft.com/en-us/microsoftteams/teams-app-permission-policies#user-experience