Admin deployment of Zoom Apps
It is possible that account admins will want to limit access to certain Zoom Apps because of security policies or other requirements or they may want to disable access to all Zoom Apps altogether. Zoom can control the access to Zoom Apps in a variety of ways, including disabling Zoom Apps at an account or group level, pre-approval by the administrator for specific Zoom Apps, and using MSI, plist, and GPO options that allow users to restrict desktop access directly from the desktop client to Zoom Apps.
In this article, we will provide information on the default access to Zoom Apps, how to enable Zoom Apps for use within Zoom desktop clients, and how to approve Zoom Apps for use before they can be used, in order to provide a better understanding of how Zoom Apps work. Several frequently asked questions can be answered on our site, including how to install and use Zoom Apps, how to suspend the use of Zoom Apps in-meeting, as well as other frequently asked questions.
Prerequisites for admin management of Zoom Apps
-
Permissions to own or manage an account
Default Zoom Apps access
To access and use Zoom Apps, you do not need to have an account, but there are a few settings that can be configured to reflect your account’s privacy and security needs based on your account’s settings. Admins can enable the Zoom Apps button in the desktop client, and if pre-approval of Marketplace apps has been disabled, then users can see the Zoom Apps button in the desktop client and can install apps in the desktop client without having to wait for approval.
Whether you have a free or paid Zoom account, Zoom Apps will be enabled and visible on the desktop client, and in this case, it is not necessary to pre-approve Marketplace apps since there will not be other users for which to perform the pre-approval process. The owner of an account will be notified when additional users are added to their account and that the pre-approval option is disabled; as with new multi-user accounts, the owner of an existing multi-user account will be guided on how to manage this setting for their account. In the desktop client, Zoom Apps are enabled by default, and they are visible for existing multiuser accounts in the desktop client. However, if an account intends to use Zoom Apps in the Marketplace, a preapproval request is required in the Marketplace settings.
Visibility in desktop client | Marketplace Pre-Approval of Apps |
|
---|---|---|
Single-user accounts (Free and Pro) | Yes | N/A |
Existing multi-user accounts | Yes | Enabled |
The Zoom App may access certain meeting data (such as meeting topics, complete participant lists, URLs of meetings, and recordings of meetings) as well as certain user data (such as information pertaining to a user’s profile). If the Zoom App user is the meeting owner (which means that the meeting belongs to that user) or a participant in the meeting in question, Zoom Apps will only be able to access meeting data depending on the user’s role in the meeting. There are some Zoom Apps available that may require access to meeting data that can only be provided by the original meeting host. These Zoom Apps require access to meeting data such as the meeting topic, full list of participants, meeting URL, and recording of the meeting, and will only work in meetings when the original meeting host is present. In the event that the app owner is not present in the meeting, an error message will appear if the app is attempted to be accessed. Zoom Apps can also be used without the host being present in a meeting, but their access to information in a meeting is limited in comparison to Zoom Apps. A participant can, for example, start a Zoom App without being present at the meeting, and that Zoom App will only have access to that participant’s data, such as their display name, if the participant joins the meeting without the owner present. In a meeting, all participants are notified when any Zoom App accesses meeting content, such as video, audio, chat and/or meeting files. This information is provided by the Active Apps Notifier, which identifies the apps that are currently active and access meeting content in addition to which participant(s) are using those apps. You can find more information about the app and its permissions by clicking on a link that opens the marketplace page of the specified app. Aside from that, the meeting host will also have the option to suspend all Zoom App usage at any time, through the security controls that are available within the meeting, at any time.
The pre-approval of any Marketplace apps is required by default for most accounts, as it is by default for most accounts. You can adjust your permissions to ensure that apps that require pre-approval can be installed by users without having to first require them to be pre-approved, or if you want to adjust which apps need to be pre-approved before they can be installed by users. Make sure you are logged in as the account owner or administrator of the account at https://marketplace.zoom.us/. To manage your Marketplace, click the Manage button in the top-right corner of the page. Please click on the Permissions link under My Admin Dashboard in order to modify your permissions. For your users to have access to your apps, enable or disable the toggle on the Zoom App Marketplace that requires publicly listed apps to be pre-approved before being enabled. If you see a confirmation dialog box, click Turn On to make sure the change has been applied. (Optional) In order to exempt Zoom-created apps from having to be approved by an admin for their installation, select the Allow publicly listed apps to be installed without admin preapproval check box. To ensure apps created by company members will not be pre-approved by administrators, you can select the Allow publicly listed apps created by company members to be installed without admin pre-approval check box to allow apps from your organization to be installed without admin approval. The post has been updated to reflect the updated permissions that users of your account will receive within 24 hours if pre-approval of Zoom Apps is disabled. A version of 5.9.6 or higher is required to receive this notification. Pre-approval can be enabled in your account by choosing the advanced option, and then an email will be sent out to ALL USERS if pre-approval is enabled.
Owners and administrators can browse the Marketplace for any apps available on the platform and pre-approve them based on their need for individual users, group users, or a combination of both. As soon as an app has been pre-approved, users will receive an email notification on their desktop clients as to its availability, and they can install it from their accounts or specific groups that they have been pre-approved for once it has been approved by you. Additionally, if you have any additional questions concerning the Zoom App permissions or the information that you would be granting access to the Zoom App, you may find helpful the Developer guide on OAuth scopes and permissions. Please sign in to https://marketplace.zoom.us/ to get started. Choose an app by searching and clicking on the icon to select it from the search results. If you enable the Pre-approve toggle under Who can install, you will be able to install the product. It is by default set to Allow all users on your account to install this app, so by default that setting is selected. As an alternative, if you would prefer to pre-approve a particular user or group of users in advance, you can do the following: This app may only be installed by certain users or user groups if you select that option. Select the users you wish to add and click the Add button. The following options are available when adding a user: Add an individual user: In order to add a user to your account, you will need to enter the email address of the user. Adding additional users can be done by repeating this process as needed. Add a user group: If you would like to add a user group to your account, you need to enter its name and click Add Group. If more than one user group needs to be included, repeat the process as necessary. A pre-approved app can be made available to a combination of individual users and groups of users. Upon pre-approval for a Zoom App to be used by individuals or groups of individuals, the user or group will be notified about this pre-approval as soon as it has been granted for use. There are several options available for controlling the appearance of Zoom Apps on the computer client, such as the account level, the group level, and the user level, but this will only affect users when they are logged into your account, as shown below. There is an option for disabling Zoom Apps on the desktop client directly, regardless of which account the user is currently logged in to on the desktop client. You can use this option in MSI, plist, or GPO deployments for disabling Zoom Apps. In order to make Zoom Apps available to all users in the account, the following steps should be taken: Admins have the privilege to edit account settings as part of the Zoom web portal as long as they are logged in as an administrator. You can access the Account Settings menu by clicking the Account Management link in the navigation panel. You will find Zoom Apps under the Zoom tab. Make sure that the Zoom Apps Quick Launch Button has been enabled in Zoom Apps. The Zoom Apps button will appear on your desktop client if you enable this setting in the account settings. Click on the toggle to enable the setting if it is currently disabled. To verify the change, click the On button if you see a verification dialog box appear. To make this setting compulsory for all users in your account, click the lock icon to make this setting mandatory, and then click Lock to confirm that you want to make this setting mandatory for all users. If you would like a group of users to be able to see Zoom Apps in the desktop client, you may do the following: If you have the privilege to edit groups on the Zoom web portal, you must log in as an administrator. Click User Management then Groups in the navigation panel of the site. After selecting the appropriate group name from the list, click on the Zoom Apps tab that appears. The Quick Launch Button in Zoom Apps should be enabled if you want to use it. The Zoom Apps button will now appear on the desktop client of users that are members of this group. It is possible to enable the setting by clicking the toggle if it is disabled. You will be able to verify that the change has been made by clicking Turn On if a verification dialog appears. The next step is to determine whether you would like this setting to be mandatory for all users in your subscription, so click on the lock icon, and then click Lock to confirm that you want this setting to be mandatory. The following steps will allow you to make Zoom Apps visible for your own use in the desktop client: You will be able to sign in to your Zoom account once you have logged in. Click Settings from the navigation panel at the top of the screen. You will find Zoom Apps under the Zoom tab. If you are not able to launch Zoom Apps using the Quick Launch Button, please check that it is enabled. You can now see in the desktop client the Zoom Apps button, allowing you to easily access Zoom Apps. It is important to note that if the setting is disabled, you can enable it by clicking the toggle. You will need to click Turn On to confirm the change if a verification dialog displays. All images and contents credit goes to support.zoom.usZoom Apps data access
How to require pre-approval of Zoom Apps
How to pre-approve Zoom Apps
How to enable Zoom Apps visibility on the desktop client
Account
Group
User
FAQs?