enable only manged add ins

Question

We have a problem where, when we disable the option 'Let users access the Office Store,' the manged add-ins disappear randomly for the users. When we enable it, they become stable again. We need a way to allow users to access the Office Store, but only managed add-ins should be visible to them. or to restrict their ability to deploy any add-ins, allowing only centrally deployed add-ins to be accessible

Answer 1

Hello abdo elbarbary

May I ask how you are currently configuring this? Would you mind sharing your setup with me?

I found an article that is quite helpful From COM to Web: Managing Microsoft 365 App Add‑Ins, and I am currently configuring things according to the Managing Web Add-ins section of that article. However, it will take some time to apply. In the meantime, could you please help take a look?

Note: This information is provided as a convenience to you. These sites are not controlled by Microsoft, and Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please ensure that you fully understand the risks before using any suggestions from the above link.

Hope this information is helpful.

---

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

The behavior described matches known limitations of the “Let users access the Office Store” control and current add-in architecture. Based on the provided information, there is no supported configuration that:

• Keeps the Office Store/AppSource UI available, and
• Shows only centrally managed (admin-deployed) add-ins while fully hiding or blocking all other store content from users.

What is supported instead are these two patterns:

1. Block all user-initiated add-in downloads and rely only on centralized deployment
   Use this when the goal is “only centrally deployed add-ins are accessible.” In the Microsoft 365 admin center:
   1. Go to Settings → Org settings → Services → User owned apps and services.
   2. Clear Let users access the Office Store to block users from accessing Microsoft Marketplace and prevent users from downloading add-ins.
   3. Centrally deploy required add-ins via the integrated apps portal / Microsoft 365 admin center and assign them to users or groups.
   Effects (per documentation):
   • Users cannot access the Office Store/AppSource to acquire add-ins themselves.
   • Admin-deployed add-ins (Integrated Apps) remain available and are controlled via their Enabled / Not assigned / Removed state in the admin center.
   • For Outlook, this setting does not control Outlook add-ins; Outlook add-ins are managed separately via Exchange Online add-in policies.
2. Allow users to access the Office Store and discover/install approved add-ins themselves
   This is the opposite model: users can browse and install store add-ins. The platform does not support a “store view filtered to only centrally deployed add-ins.” In this model, to keep control, use centralized deployment for required add-ins and allow users to optionally add more from the store. There is no built-in way (in the provided documentation) to restrict the visible catalog to only a curated subset while still exposing the store UI.

Regarding the instability when Let users access the Office Store is disabled and managed add-ins “randomly disappear”:
The documentation explicitly supports the scenario “block all user-initiated add-in downloads and rely only on centralized deployment” using this setting, so centrally deployed add-ins are expected to remain available. If they disappear intermittently, this is not the intended behavior and should be treated as an issue to be investigated (e.g., via support), not as a configuration lever to achieve a “managed-only store view.”

For Outlook specifically, note:

• The Let users access the Office Store setting does not apply to Outlook add-ins; Outlook add-ins are controlled via Exchange Online policies and Centralized Deployment.
• Optional connected experiences being turned off can hide user-installed add-ins and AppSource access, but admin-deployed add-ins remain available.

Summary of what can be done with the documented controls:

• To ensure only centrally deployed add-ins are accessible:
  • Disable Let users access the Office Store (for Word/Excel/PowerPoint and other supported clients).
  • Use Centralized Deployment / Integrated Apps to assign add-ins.
• To allow users to browse the store:
  • Enable Let users access the Office Store, understanding that users will see and can attempt to install store add-ins; there is no documented way to show only managed add-ins in that UI.

---

References:

• Manage add-ins in the Microsoft 365 admin center
• Manage add-in downloads by enabling or disabling Microsoft Marketplace
• Privacy, permissions, and security for Outlook add-ins