Managing Exchange Server 2013 Apps – Managing end-users access to the Apps


We covered in the Tutorials listed below the basic steps to manage Apps in an Exchange organization running Exchange Server 2013. However the end-user has the ability by default to install their own apps on the Outlook Web App and on this Tutorial we are going to manage the end-user ability globally.

The apps can be installed at Organization Level however the end-user also has the ability to add apps on his own OWA and we can control that behaviour using user roles permissions.

Logged on the Exchange Admin Center, let’s click on permissions and then user roles. By default, we have Default Role Assignment Policy that is assigned to all users, for this Tutorial we will be changing the existent one by selecting it and then click on Edit.


In order to control apps, we can uncheck the option  My Marketplace Apps and also My Custom Apps from the default list, and then click on save.


Click on yes.


The test now can be done in any end-user, by selecting the options on their Outlook Web App session, and then click on Apps and the result will be figure below where the end-user does not have the button to add apps.



That is a good way for us controlling our end-users’ ability to manage their own applications and using the other Tutorials from this week we can control the ability from the organization level to make an app available or enable/disable it.

Written by Anderson Patricio

Anderson Patricio

Anderson Patricio is a Canadian Exchange Server MVP and MCSM (Solutions Master) and he contributes to the Microsoft Community with articles, tutorials, blog posts, forums and book reviews. He is a regular contributor at, (English) and (Portuguese).
You can connect with Anderson on Twitter , Facebook, and Google+.