Action | Device Licensing | User Licensing |
---|---|---|
App Store sign-in | Not required. | Each end user must use a unique Apple ID when prompted to sign in to App Store. |
Device configuration blocking access to App Store | Apps can be installed and updated using Company Portal. | The invitation to join Apple VPP requires access to App Store. If you have set a policy to disable App Store, user licensing for VPP apps will not work. |
Automatic app update | As configured by the Intune admin in Apple VPP token settings. If the assignment type is available for enrolled devices, available app updates can also be installed from the Company Portal by selecting the Update action on the app details page. | As configured by the Intune admin in Apple VPP token settings. If the assignment type is available for enrolled devices, available app updates can also be installed from the Company Portal by selecting the Update action on the app details page. |
User Enrollment | Not supported. | Supported using Managed Apple IDs. |
Books | Not supported. | Supported. |
Licenses used | 1 license per device. The license is associated with the device. | 1 license for up to 5 devices using the same personal Apple ID. The license is associated with the user. An end user associated with a personal Apple ID and a Managed Apple ID in Intune consumes 2 app licenses. |
License migration | Apps can migrate silently from user to device licenses only when using Required assignment type. | Apps cannot migrate from device to user licenses for any assignment type. |
# | Scenario | Invite to Apple VPP program | App install prompt | Prompt for Apple ID |
---|---|---|---|---|
1 | BYOD – user licensed (not User Enrollment device) | Y | Y | Y |
2 | Corp – user licensed (not supervised device) | Y | Y | Y |
3 | Corp – user licensed (supervised device) | Y | N | Y |
4 | BYOD – device licensed | N | Y | N |
5 | CORP – device licensed (not supervised device) | N | Y | N |
6 | CORP – device licensed (supervised device) | N | N | N |
7 | Kiosk mode (supervised device) – device licensed | N | N | N |
8 | Kiosk mode (supervised device) – user licensed | --- | --- | --- |
Action | iOS/iPadOS | macOS |
---|---|---|
Remove app assignment | When you remove an app that was assigned to a user, Intune reclaims the user or device license and uninstalls the app from the device. | When you remove an app that was assigned to a user, Intune reclaims the user or device license. The app is not uninstalled from the device. |
Revoke app license | Revoking an app license reclaims the app license from the user or device. You must change the assignment to Uninstall to remove the app from the device. | Revoking an app license reclaims the app license from the user or device. The macOS app with revoked license remains usable on the device, but cannot be updated until a license is reassigned to the user or device. According to Apple, such apps are removed after a 30-day grace period. However, Apple does not provide a means for Intune to remove the app using Uninstall assignment action. |