Skip Navigation

Assign an app group to a user account

If you need to control apps at the user level, you can assign apps or app groups to user accounts. When you assign an app to a user, the app is made available to any devices that the user has activated for that device type, and the app is listed in the work app catalog on the device.
You can also assign apps to users for device types that the user has not activated yet. If the user activates a different device type in the future, the proper apps are made available to that user's new device. 
The same app can be assigned directly to the user account, or inherited from user groups or device groups. The settings for the app (for example, whether the app is required) are assigned based on priority: device groups have the highest priority, then user accounts, then user groups.
Add the apps to an app group.
  1. On the menu bar, click 
    Users > Managed devices
  2. Search for a user account.
  3. In the search results, click the name of a user account.
  4. In the 
    Apps
     section, click The Add icon.
  5. Select the check box beside the apps or app group that you want to assign to the user account.
  6. Click 
    Next
    .
  7. In the 
    Disposition
     drop-down list for the app, perform one of the following actions:
    • To require users to install the app, select 
      Required
      .
    • To permit users to install and remove the app, select 
      Optional
      .
      If the same app is assigned to a user account, a user group that the user belongs to, and the device group the device belongs to, the disposition of the app assigned in the device group takes precedence.
  8. For 
    iOS
     devices, to assign per-app VPN settings to an app or app group, in the 
    Per app VPN
     drop-down list for the app or app group, select the settings to associate with the app or app group. 
  9. If you are adding an 
    iOS
     app, perform one of the following tasks:
    Task
    Steps
    If you have not added a VPP account or you are not adding an 
    iOS
     app
    1. Click 
      Assign
      .
    If you are adding an 
    iOS
     app and you have added at least one VPP account
    1. Click 
      Next
      .
    2. Select 
      Yes
       if you want to assign a license to the 
      iOS
       app. Select 
      No
      , if you do not want to assign a license or you do not have a license to assign to the app.
    3. If you have assigned a license to the app, in the 
      App license
       drop-down list, select the VPP account to associate with the app.
    4. In the 
      Assign license to
       drop-down list, assign the license to the 
      User
       or 
      Device
      . If no value is specified in the 
      App license
       drop-down list, the 
      Assign license to
       drop-down list is not available.
    5. Click 
      Assign
      .
      Users must follow the instructions to enroll in your organization's VPP on their devices before they can install prepaid apps. Users have to complete this task once
    If you grant access to more licenses than you have available, the first users who access the available licenses can install the app. If the app is a required app that does not have an available license, you must obtain the license before the user can install the app or be subject to any compliance rules that you have assigned to the user.