Manage Apps

Control which third-party and custom apps are available in Microsoft Teams across your organization. OpsPilot365 provides centralized app management with bulk deployment and cross-tenant visibility into app configurations.

Note: Teams is included in Microsoft 365 Business Basic and higher. Managing Teams apps via Graph API requires Group.ReadWrite.All and TeamSettings.ReadWrite.All permissions.

App Governance

Teams app governance operates at multiple levels to control the app experience for users:

Setting	Description
Org-wide settings	Default allow or block for all third-party and custom apps
App permission policies	Control app availability per user or group
App setup policies	Pin and auto-install apps to the user sidebar
Custom app policy	Allow or block custom app uploads (sideloading)

App Categories

Category	Description	Examples
Microsoft apps	Built-in first-party Microsoft Teams apps	Planner, OneNote, Forms, Lists
Third-party apps	Apps published in the Teams app store by partners	Trello, Jira, Zoom, Salesforce
Custom apps	Organization-built apps (sideloaded or published)	LOB tools, internal bots, custom tabs

Permission Policies

Permission policies determine which apps users can install and access:

Global (default) — Applies to all users unless overridden by a direct or group assignment
Custom policies — Restrict or expand app access for specific departments, roles, or teams
Microsoft apps scope — Allow all, block all, or allow/block specific Microsoft apps
Third-party apps scope — Allow all, block all, or allow/block specific third-party apps
Custom apps scope — Allow all or block all custom (sideloaded) apps

App Setup Policies

Configure how apps appear to users:

Pinned apps — Apps pinned to the Teams left rail for immediate access
App bar order — The display sequence of pinned apps in the sidebar
Installed apps — Apps automatically installed for assigned users
Upload custom apps — Whether users can sideload custom apps

App Requests

Users can request access to blocked apps. Admins review and approve or deny requests through the Teams admin center or via OpsPilot365’s centralized management interface.

Team Templates with Apps

Pre-configured team templates include apps tailored for specific scenarios:

Template	Pre-installed Apps
Project Management	Planner, OneNote
Event Management	Lists, Forms
Retail Store	Shifts, Tasks
IT Helpdesk	Lists, Wiki

Best Practices

App Governance

Block third-party apps by default, allow by exception
Review app permission policies quarterly
Only allow custom apps that have been security-reviewed
Use setup policies to pin essential apps for each role

Security Considerations

Audit which apps have access to organizational data
Monitor app consent grants for excessive permissions
Block apps from untrusted publishers
Implement app certification requirements for custom apps

API Reference


# List all teams in tenant
GET /groups?$filter=resourceProvisioningOptions/Any(x:x eq 'Team')


# OpsPilot365 API - Bulk team provisioning
POST /api/teams/bulk-create
{
  "tenantId": "tenant-guid",
  "templateId": "msp-project-template",
  "teams": [
    {
      "displayName": "Client A Project",
      "owners": ["user1@domain.com"],
      "members": ["user2@domain.com"]
    }
  ]
}

GET /api/teams/apps — List available apps
PUT /api/teams/apps/:id/permissions — Update app permissions
GET /api/teams/apps/requests — List pending app requests