restrict access to a specific vpp token
In a K-12 division set up VPP tokens for each location for a Principal to purchase apps for their specific school location with out having access to the divisional VPP apps, but allowing the Division to monitor all apps at all locations.
Elliot Smith commented
This feature is now implemented with scope tags being added to VPP tokens.
Olisi tarvetta pikaisesti
Esa Vokkolainen commented
Agree with others. If you have dozens of schools using same Intune tenant it is impossible for teachers to have delegated administration over their own school purchased VPP apps, because everybody sees all VPP tokens and can install apps using any token.
Jason Gudmundson commented
It would be great if each location could have its own pool of apps. This would make intune for education useful.
Brent Barske commented
Yes, this would be a great feature! We would like a designated user at each school to be able to deploy apps in Intune, and purchase apps using a VPP Sub-account.