As you know, since Windows 8.x Microsoft has introduced the App Store, which is mainly used with your Microsoft Account.
It has been fairly complicated so far to have an efficient way for enterprises to be able to manage their own App Store. This now possible and quite frankly, it is not so bad
Create and Configure your Corporate App Store
First thing is you need to login to https://businessstore.microsoft.com and sign in with an Office 365 or Azure AD Admin account
Configure the MDM to use
Then you need to setup your store using the Settings\Management Tools to define which tool will be used to push application using a mobile device management
Click on Add a management tool and search for the management tool you want to use – NOTE the tool must have been listed/configured on your Azure AD; for the purpose of this post I’m adding Office 365 (which includes a MDM) and Intune.
You can only have one MDM activated and used to push application
Once you have added the MDM you want to use, just Activate it
Delegate Access
Using the Settings\Permissions option you can delegate access to the store and delegate the administration and/or application purchase. Off course, by default the account you used to create your store has full administration permissions, including buying apps
Search the user(s) you want to delegate access to your corporate store and assign the permission; the search is using your Azure AD, so if you are synching from your On Premises Active Directory ensure the account you are looking for is synched
- Global Administrator – IT Pros with this account have full access to Store for Business. They can do everything allowed in the Store for Business Admin role, plus they can sign up for the Store for Business, and assign Store for Business roles to other employees.
- User Administrator – IT Pros with this account can assign Store for Business roles to other employees, as long as the User Administrator also has the Store for Business Admin role.
- Billing Administrator – IT Pros with this account have the same permissions as the Store for Business Purchaser role
Application Inventory
Using the Manage\Inventory menu you can review the application available through your corporate store.
As you just have created your store, the inventory is empty. As soon as you will add applications, you will be able to manage apps from there.
Add Application to Your Store
This where improvements should take place. The shop is not providing the same experience than the one for consumer.
The Shop main page is just showing few featured application but does not provide a way to browse the store. You need to search for the application you want to add to your store.
Using the search box, look for the application you want to deploy; if there is multiple results, you will be able to refine to Mobile or PC applications, Category…
Click on the application you want to buy
Then select Get the app. Depending of the application, you may have to choose between Online or Offline license
Then you got a confirmation that the app has been purchased and is now available on your inventory. NOTE at this stage the app is NOT available on your corporate store
Once the app has been purchased, click on the Add to private store button – NOTE this action is also available from the Inventory
It will take up to 24 hours to get the application available on your store
Assign Application to Users
Once you have purchased and added applications onto your store, you can either let the users to choose to install it or assign it.
You can assign application either immediately after you have added the app onto your store or from the inventory
NOTE if you just have added the application to your store, the application will be available as soon as the status in the inventory will be In Private Store
When you assign an application, the use will receive a notification email
Install Applications from Your Private Store
Open the Store application and click on your account on the top right side, just before the search box
This open a new pop up showing your Microsoft Account and allowing you to add an account
Click Add account and select Work or school account and sign in with your corporate account
Once you have signed in/added your corporate account, the corporate store will be displayed in the top bar and if you hit it, this will display the applications available in your private store
If you are already signed in using your corporate credentials (Azure AD Joined device), the private store is already available.