What app types are supported? You can purchase and distribute public as well as private apps using Apple Business Manager. Store apps: Using Apple Business Manager, Content Managers can buy both free and paid apps that are available in the App Store. Custom Apps: Using Apple Business Manager, Content Managers can also buy Custom Apps made available privately to your organization. AirWatch Agent is now Intelligent Hub! The Intelligent Hub app is the single destination where employees can have an enhanced user experience with unified onboarding, catalog, and access to services such as People, Notifications, and Home. Capabilities:.Stay Secure, Stay Connected. Intelligent.
This guide provides information about using the AirWatch Provisioning app to provision users and groups in Workspace ONE UEM from the VMware Workspace ONE Access Mac open file program. service.
The AirWatch Provisioning app creates, updates, and deletes users and groups in the Workspace ONE UEM console. When users are added, the user type designated in Workspace ONE UEM is Directory.
Note: The product name AirWatch was renamed Workspace ONE UEM. In this guide, Workspace ONE UEM service and AirWatch both refer to Workspace ONE UEM.
You use the AirWatch Provisioning app with the Workspace ONE UEM service when an LDAP server cannot be used with the VMware AirWatch Cloud Connector to synchronize users. Users who are created in the Workspace ONE Access service using either the System for Cross-domain Identity Management (SCIM) API or the just-in-time (JIT) service can be provisioning to the Workspace ONE UEM service.
To use the AirWatch Provisioning app, the following are the configuration requirements.
Note: To complete the configuration, you must have administrator privileges for both the Workspace ONE Access console and the Workspace ONE UEM console.
-->
Apple lets you purchase multiple licenses for an app that you want to use in your organization on iOS/iPadOS and macOS devices using Apple Business Manager or Apple School Manager. You can then synchronize your volume purchase information with Intune and track your volume-purchased app use. Purchasing app licenses helps you efficiently manage apps within your company and retain ownership and control of purchased apps.
Microsoft Intune helps you manage apps purchased through this program by:
Additionally, you can synchronize, manage, and assign books you purchased from Apple Business Manager with Intune to iOS/iPadOS devices. For more information, see How to manage iOS/iPadOS eBooks you purchased through a volume-purchase program.
What are location tokens?
Location tokens are also known as Volume Purchase Program (VPP) tokens. These tokens are used to assign and manage licenses purchased using Apple Business Manager. Content Managers can purchase and associate licenses with location tokens they have permissions to in Apple Business Manager. These location tokens are then downloaded from Apple Business Manager and uploaded in Microsoft Intune. Microsoft Intune supports uploading multiple location tokens per tenant. Each token is valid for one year.
How are purchased apps licensed?
Purchased apps can be assigned to groups using two types of licenses that Apple offers for iOS/iPadOS and macOS devices.
Note
Company Portal does not show device-licensed apps on User Enrollment devices because only user-licensed apps can be installed on User Enrollment devices.
What app types are supported?
You can purchase and distribute public as well as private apps using Apple Business Manager.
Prerequisites
Important
Migrate from Volume Purchase Program (VPP) to Apps and Books
If your organization has not migrated to Apple Business Manager or Apple School Manager yet, review Apple's guidance on migrating to Apps and Books before proceeding to manage purchased apps in Intune.
Important
Migrate existing purchased VPP content and tokens to Apps and Books in Apple Business Manager or Apple School Manager as follows:
Upload an Apple VPP or location token
Synchronize a VPP token
You can synchronize the app names, metadata and license information for your purchased apps in Intune by choosing Sync for a selected token.
Assign a volume-purchased app
Note
The Available deployment intent is not supported for device groups, only user groups are supported. The list of apps displayed is associated with a token. If you have an app that is associated with multiple VPP tokens, you see the same app being displayed multiple times; once for each token.
Note
Intune (or any other MDM for that matter) does not actually install VPP apps. Instead, Intune connects to your VPP account and tells Apple which app licenses to assign to which devices. From there, all the actual installation is handled between Apple and the device.
End-User Prompts for VPP
The end-user will receive prompts for VPP app installation in a number of scenarios. The following table explains each condition:
Note
It is not recommended to assign VPP apps to Kiosk-mode devices using user licensing.
Revoking app licenses
You can revoke all associated iOS/iPadOS or macOS volume-purchase program (VPP) app licenses based on a given device, user, or app. But there are some differences between iOS/iPadOS and macOS platforms.
Note
Deleting VPP tokens
You can delete an Apple Volume Purchasing Program (VPP) token using the console. This may be necessary when you have duplicate instances of a VPP token. Deleting a token will also delete any associated apps and assignment. Deleting a token revokes associated app licenses but doesn't uninstall the apps.
Intune cannot revoke app licenses after a token has been deleted.
To revoke the license of all VPP apps for a given VPP token, you must first revoke all app licenses associated with the token, then delete the token.
Renewing VPP tokens
You can renew an Apple VPP token by downloading a new token from Apple Business Manager or Apple School Manager and updating the existing token in Intune.
To renew an Apple VPP token, use the following steps:
Note
You must download a new Apple VPP or location token from Apple Business Manager and update the existing token within Intune when the user, who set up the token in Apple Business Manager, changes their password or the user leaves your Apple Business Manager organization. Tokens that are not renewed will show 'invalid' status in Intune.
Deleting a VPP app
Currently, you cannot delete an iOS/iPadOS VPP app from Microsoft Intune.
Assigning custom role permissions for VPP
Access to Apple VPP tokens and VPP apps can be controlled independently using permissions assigned to custom administrator roles in Intune.
Airwatch App ReviewsAdditional information
Apple provides direct assistance to create and renew VPP tokens. For more information, see Distribute content to your users with the Volume Purchase Program (VPP) as part of Apple's documentation.
Samsung Airwatch App
If Assigned to external MDM is indicated in the Intune portal, then you (the Admin) must remove the VPP token from the 3rd party MDM before using the VPP token in Intune.
If status is Duplicate for a token, then multiple tokens with the same Token Location have been uploaded. Remove the duplicate token to begin syncing the token again. You can still assign and revoke licenses for tokens that are marked as duplicate. However, licenses for new apps and books purchased may not be reflected once a token is marked as duplicate.
Frequently asked questionsHow many tokens can I upload?
You can upload up to 3,000 tokens in Intune.
How long does the portal take to update the license count once an app is installed or removed from the device?
The license should be updated within a few hours after installing or uninstalling an app. Note that if the end user removes the app from the device, the license is still assigned to that user or device.
Is it possible to oversubscribe an app and, if so, in what circumstance?
Yes. The Intune admin can oversubscribe an app. For example, if the admin purchases 100 licenses for app XYZ, and then targets the app to a group with 500 members in it. The first 100 members (users or devices) will get the license assigned to them, the rest of the members will fail on license assignment.
Next steps
See How to monitor apps for information to help you monitor app assignments.
See How to troubleshoot apps for information on troubleshooting app-related issues.
Comments are closed.
|
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |