Manage user access to add-ins for Outlook

Exchange 2013
 

Applies to: Exchange Online, Exchange Server 2013, Exchange Server 2016

Topic Last Modified: 2017-02-03

You can use the EAC or Exchange Online PowerShell to manage user access to add-ins for Outlook.

  • Using the Exchange admin center (EAC), you can manage basic add-in access settings for your users at an organizational level. For example, you can configure whether an add-in is enabled or disabled for your users. You can also specify whether an add-in is required or optional for your users.

  • With Exchange Online PowerShell, you can manage all the settings that you can with the EAC, as well as other settings. For example, you can limit availability to specific users in your organization.

For additional management tasks, see Add-ins for Outlook.

TipTip:
Having problems? Ask for help in the Exchange forums. Visit the forums at Exchange Server, Exchange Online, or Exchange Online Protection..

  1. In the EAC, navigate to Organization > Add-ins.

  2. In the list view, select the add-in that you want to change settings for, and then click Edit Edit icon.

  3. If you don’t want your users to use the add-in, clear the Make this add-in available to users in your organization check box, and then click Save.

  4. If you want your users to be able to use the add-in, select Make this add-in available to users in your organization, and then select the option you want.

    • Optional, enabled by default   Use this setting if you want to allow your users to turn off the add-in.

    • Optional, disabled by default   Use this setting if you want to allow your users to turn on the add-in.

    • Mandatory, always enabled. Users can’t disable this add-in   Use this setting if you don’t want your users to turn off the add-in.

  5. Click Save.

You can use Exchange Online PowerShell to specify whether an add-in is available, enabled, or disabled.

NoteNote:
Run the following command to look up the display names and add-in IDs for all the add-ins for Outlook installed for your organization.
Get-app -Organizationadd-in | Format-List DisplayName,add-inID

If you want an add-in to be disabled and hidden from all your users, run the following command.

Set-app <add-in ID> -Organizationadd-in -Enabled $false

If you want the add-in to be enabled by default, but you want your users to be able to turn it off, run the following command.

Set-app <add-in ID> -Organizationadd-in -Enabled $true -DefaultStateForUser Enabled

If you want the add-in to be disabled by default, but you want your users to be able to turn it on, run the following command.

Set-app <add-in ID> -Organizationadd-in -Enabled $true -DefaultStateForUser Disabled

If you want the add-in to be required for your users, run the following command.

Set-app <add-in ID> -Organizationadd-in -Enabled $true -DefaultStateForUser AlwaysEnabled

For detailed syntax and parameters, see Set-App.

  1. In the EAC, navigate to Organization > Add-ins.

  2. Review the values in the User Default and Provided To columns.

Or

  1. From Exchange Online PowerShell, run Get-app -Organizationadd-in | Format-List DisplayName,add-inId,Enabled,Default*.

  2. Review the values for DefaultStateForUser and Enabled.

If you want only members of your Marketing team distribution group to be able to use the LinkedIn add-in, run the following commands.

$a = Get-DistributionGroupMember Marketing
Set-app <add-in ID for the LinkedIn add-in> -Organizationadd-in -ProvidedTo SpecificUsers -UserList $a.Identity -DefaultStateForUser Enabled}

For detailed syntax and parameters, see Set-App.

To verify that you’ve successfully limited access for specific users, do the following:

  1. From Exchange Online PowerShell, run Get-app -Organizationadd-in | Format-List DisplayName,add-inId,Enabled,Default*,ProvidedTo,UserList.

  2. Review the value for ProvidedTo.

 
Show: