ChangeIntelIT change radar
Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 267/272 feeds/APIs · 469/469 docs · 7/9 advisories · checked 17:47 UTC Customize Public modeDiscuss ChangeIntel on Discord
MC688930 Plan for changeUpdated messageNew featureUser impactAdmin impact

Teams admin center: App centric management and changes to app permission policies

Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.
Microsoft Teams
Microsoft 365 admin center

Rollout

Roadmap
151829

Rollout dates are often only in the text. When Microsoft moves them, the change shows under "What changed".

Schedule dates changed in the text

Date phrases in schedule sentences differ between the versions this installation saw
  • Seen 18 Apr 2025 the end of March 2025 → mid-May 2025, end of June 2025
  • Seen 26 Mar 2025 the end of March 2025
  • Seen 4 Mar 2025 late-November 2024, late November 2023, early November 2024, late March 2025, late May 2024 → late November 2024, March 2025, April 2025, end of March 2025
  • Seen 4 Feb 2025 late March 2025
  • Seen 12 Nov 2024 mid-November 2024 → late-November 2024, mid-December 2024
  • Seen 25 Oct 2024 mid-November 2024
  • Seen 13 Sep 2024 late September 2024 → early November 2024, late May 2024
  • Seen 13 Aug 2024 late June 2024, mid-March 2024 → late September 2024
  • Seen 6 Jun 2024 May 2024 → late June 2024
  • Seen 12 Apr 2024 May 2024
  • Seen 11 Mar 2024 late February 2024 → mid-March 2024

Read from date phrases in Microsoft's text, not from notice metadata. A changed phrase can be a moved rollout, a new milestone or just rewording; "What changed" below shows which.

What the notice says

Microsoft’s text, with source markup removed
Updated April 18, 2025: We have completed Phase 1. Phase 3 (auto-migration) has begun and is updated to define the rollout timeline and cohorts. Phase 2 (self-migration) is also updated and extended to mid-May for the customers who are not in the first round of auto migration. See below for details. The migration to app-centric management using the Migration Wizard (Phase 2) started rolling out in late November 2024 and completed rolling out in mid-December 2024. Administrators are now able to start the migration themselves using the wizard. The automatic migration for customers with only a global permission policy (Phase 1) will complete by end-March 2025 and those with multiple permission policies (Phase 3) will begin in April 2025 Detailed documentation for the migration process is available at App centric management to manage user access to Teams apps - Microsoft Teams | Microsoft Learn. App centric management introduces new admin settings to control who in the tenant can install Teams apps. First, admins can set a default value for new apps that are published to the Teams app store. Second, admins can manage apps for users, groups, or everyone in the organization. This feature replaces the existing app permission policies and provides admins with the ability to manage access to the app individually. The app permission policies for existing customers are migrated to maintain existing app availability in the tenant.  This message is associated with Microsoft 365 Roadmap ID 151829  When this will happen: This feature will gradually roll out across three major phases. Phase 1 (Complete): Auto-migration for only single policy customers - This is applicable for customer with only a global permission policy. The roll-out has started and will be complete by end of March 2025. Phase 2: Self-migration – admins of our customers can do self-migration using the Migration Wizard. This is the preferred way for customers to have tenant admin to be in the loop of migration. The migration Wizard is extended until mid-May (previously end of March 2025) for customers with one or more custom app permission policies with users assigned to them. There will be no further exceptions granted. Phase 3: Auto-migration for all customers – This is for customers who have not completed self-migration in Phase 2. This has started in mid-April and will complete by mid-May 2025 for customers with custom permission policies, but no users assigned to them. All other customers will be auto-migrated starting in mid-May until end of June 2025 (previously starting April 2025).  Auto-migration will maintain the same access defined in app permission policies whenever there is no conflict between a user’s assigned policies. If a user’s policies conflict by allowing and blocking the same app for them, we will auto-migrate their app as allowed. After auto-migration, there will be a security group created for each set of users assigned to each app permission policy. These groups will be assigned to each app they are allowed in their respective policy, maintaining their app access. Groups Administrators can manage these groups like any others to customize the app centric management assignments, such as adding and removing users, or removing the group and replacing it with another. How this will affect your organization: Starting with this release, you can: 1. Manage Teams apps for selected set of users, groups or all users in the organization. 2. Set the default value for new apps published to Teams app store for each of the app types: Microsoft, third-party and custom apps. What you need to do to prepare: No action needed for phase 1 tenants with Global permission policy only. . Migrate to app centric management manually via the Migration Wizard provided in Phase 2 by mid-May 2025 (previously the end of March 2025) if you do not want to be auto-migrated during Phase 3.

What changed

Between archive captures, newest first

  1. Only details this page does not show changed.

  2. The text changed; it is too long to compare word by word here.

  3. … app permission policies whenever there is no conflict between a user’s assigned policiesSD1.1BN1.2.policies. If a user’s policies conflict by allowing and blocking the same app …

  4. Updated March 3,26, 2025: We have updated the rollout timeline below. Thank you for your patience. provided additional details about Phase 3 below. The migration to app-centric management using the Migration Wizard (Phase 2) started … out to support. Phase 3: Auto-migration for all customers – This is application for customers who have not completed self-migration in Phase 2. This is targeted to start in April 2025. Auto-migration will maintain the same access defined in app permission policies whenever there is no conflict between a user’s assigned policiesSD1.1BN1.2. If a user’s policies conflict by allowing and blocking the same app for them, we will auto-migrate their app as allowed. After auto-migration, there will be a security group created for each set of users assigned to each app permission policy. These groups will be assigned to each app they are allowed in their respective policy, maintaining their app access. Groups Administrators can manage these groups like any others to customize the app centric management assignments, such as adding and removing users, or removing the group and replacing it with another. How this will affect your organization: Starting with this release, you can: … No action needed for phase 1 tenants with Global permission policy only. More information will be. Migrate to app centric management manually via the Migration Wizard provided for phasein Phase 2 and 3 tenants in a follow-up communication before launch.by the end of March 2025 if you do not want to be auto-migrated during Phase 3.

  5. Updated February 4,March 3, 2025: We have updated the rollout timeline below. Thank you for your patience. The migration to app-centric management using the Migration Wizard (referenced as Phase 2(Phase 2) started rolling out in this post) is expected to resume by late-November late November 2024 and complete the roll completed rolling out byin mid-December 2024. At that time, administrators will be Administrators are now able to self-initiatestart the migration themselves using the wizard. The automatic migration for customers with only a global permission policy (Phase 1) and those with multiple permission policies (Phase 3) will be postponed until early 2025. Further updates, including the details for Phase 3 auto-migration, will be provided in a future MC post update complete by end-March 2025 and public documentation. App centric management (ACM) is on hold as of August 14, 2024, and will restart in mid-October (previously mid-September). Your experience during this hold will fall under one of the following, those with Phases defined in detail below. If your tenant has already been migrated to ACM, it will remain on ACM. The rest of this MC post is not applicable to your tenant. If your tenant fell under the Phase 1 criteria of using only the Global app multiple permission policy and no custom app permission policies, it policies (Phase 3) will resume auto migration begin in mid-September. If you do not have a draft currently saved, you will not be able to access ACM migration until the roll out restarts. What is in Phase 2? Migration wizard: a step-by-step guide to help you migrate the permission policies. You will be able to select which polities to migrate and designate users groups or individuals who should have access to the apps. Testing and Validation: before finalizing the migration, you will have the opportunity to test and export your staged changes. You can use this to make side-by-side comparison with your current setup, ensuring everything is perfect before you proceed. Duration: The migration process is designed to have no downtime for the end users and can take a few hours to complete. During the migration, your existing permission policies will remain in effect until the transition to app centric management completes. April 2025 Detailed documentation for the migration process is available at App centric management … existing customers are migrated to maintain existing app availability in the tenant.   This message is associated with Microsoft 365 Roadmap ID 151829   When this will happen: This feature will gradually roll out across three major phases. Phase 1 (from late November 2023 to early November 2024 (previously late September) to late March 2025 affects the tenants that use 1: Auto-migration for only single policy customers - This is applicable for customer with only the Global app a global permission policy and have no custom app permission policies. policy. The app status from the permission policy roll-out has started and tenant settings will be migrated to preserve the admin intent. The migration will not affect the end users and their ability to use complete by end of March 2025. Phase 2: Self-migration – admins of our customers can do self-migration using the apps. Admins may seeMigration Wizard. This is the Manage apps page in a read-only mode preferred way for a short time. Phase 2 (from late May 2024 customers to mid-December 2024 (previously mid-November)) affects the tenants that use both global and custom app permission policies. This phase will let the have tenant admin choose to migrate to app centric management by following a be in the loop of migration. The migration process that will change the existing app permission policies Wizard is available to app assignments in the new app centric model. The admins will have the choice all customers now till end of March 2025. If you need more time to modify the apps that are assigned using the custom permission policies prepare for self-migration, please reach out to be accessible to groups, if they want. Phase 3 (mid-April 2025) applies to the tenants that skipped the migration support. Phase 3: Auto-migration for all customers – This is application for customers who have not completed self-migration in phase 1 or Phase 2. These tenants will be migrated automatically This is targeted to start in this phase. More details to come as a follow up MC post.April 2025. How this will affect your organization: Starting with this release, you can: …

  6. The text changed; it is too long to compare word by word here.

  7. The text changed; it is too long to compare word by word here.

  8. Only details this page does not show changed.

  9. Updated September 13,October 24, 2024: We have updatedThe migration to app-centric management using the Migration Wizard (referenced as Phase 2 in this post) is expected to resume by mid-November 2024. At that time, administrators will be able to self-initiate the migration using the contentwizard. The automatic migration for clarity. Thank youcustomers with only a global permission policy (Phase 1) and those with multiple permission policies (Phase 3) will be postponed until early 2025. Further updates, including the details for your patience.Phase 3 auto-migration, will be provided in a future MC post update and public documentation. App centric management (ACM) is on hold as of August 14, 2024, …

  10. Updated August 22,September 13, 2024: We have updated the content for clarity. Thank you for your patience. App centric management (ACM) is on hold as of August 14, 20242024, and will restart in mid-Septembermid-October (previously June).mid-September). Your experience during this hold will fall under one of the following , following, with Phases defined in detail below. If your tenant has already been … out across three major phases. Phase 1 (from late November 2023 to late Septemberearly November 2024 (previously late February)September) affects the tenants that use only the Global app permission policy and … page in a read-only mode for a short time. Phase 2 (from midlate May 2024 to late Septemberearly November 2024 (previously July))late September)) affects the tenants that use both global and custom app permission policies. …

  11. Updated August 12,22, 2024: We have updated the rollout timelines and content below. content for clarity. Thank you for your patience. App centric management (ACM) is on hold … and no custom app permission policies, it will resume auto migration in mid September. If you had started the migration wizard in Phase 2 and saved a draft of your progress with the Finish later option, you may continue and complete your migration.mid-September. If you do not have a draft currently saved, you will not …

  12. The text changed; it is too long to compare word by word here.

  13. Only details this page does not show changed.

  14. Updated June 7,July 5, 2024: We have updated the rollout timeline below. Thank you for your … Manage apps page in a read-only mode for a short time. Phase 2(late June2(early July 2024 (previously May))late June)) affects the tenants that use both global and custom app permission policies. …

  15. Updated June 6,7, 2024: We have updated the rollout timeline below. Thank you for your … that Phase 2 of app centric management roll out is scheduled to begincomplete in late June 2024 (previously May). This phase will be available to …

  16. Updated April 12,June 6, 2024: We have updated the rollout timeline below. Thank you for your patience. We are excited to announce that Phase 2 of app centric management roll out is scheduled to begin in May 2024.late June 2024 (previously May). This phase will be available to all tenants and can be initiated … Manage apps page in a read-only mode for a short time. Phase 2(more details coming soon as a follow up MC post)2(late June 2024 (previously May)) affects the tenants that use both global and custom app permission policies. …

  17. Updated March 11,April 12, 2024: We are excited to announce that Phase 2 of app centric management roll out is scheduled to begin in May 2024. This phase will be available to all tenants and can be initiated at the admin’s discretion. What is in phase 2? Migration wizard: a step-by-step guide to help you migrate the permission policies. You will be able to select which polities to migrate and designate users groups or individuals who should have updatedaccess to the apps. Testing and Validation: before finalizing the migration, you will have the timing ofopportunity to test and export your staged changes. You can use this change below. Thankto make side-by-side comparison with your current setup, ensuring everything is perfect before you proceed. Duration: The migration process is designed to have no downtime for the end users and can take a few hours to complete. During the migration, your patience.existing permission policies will remain in effect until the transition to app centric management completes. Detailed documentation for the migration process will be available in our online documentation, which currently includes information on managing apps after ACM migration. App centric management introduces new admin settings to control who in the …

  18. Updated February 16,March 11, 2024: We have updated the timing of this change below. Thank you … the tenant.  This message is associated with Microsoft 365 Roadmap ID 151829 [WhenWhen this will happen:]happen: This feature will gradually roll out across three major phases. Phase 1 (from late November 2023 to late February mid-March 2024 (previously earlylate February) affects the tenants that use only the Global app permission policy … 1 or 2. These tenants will be migrated automatically in this phase. [HowHow this will affect your organization:]organization: Starting with this release, you can: 1. Manage Teams apps for selected … store for each of the app types: Microsoft, third-party and custom apps. [WhatWhat you need to do to prepare:]prepare: No action needed for phase 1 tenants with Global permission policy only. …

  19. … the tenant.  This message is associated with Microsoft 365 Roadmap ID 151829 When[When this will happen:happen:] This feature will gradually roll out across three major phases. Phase 1 … 1 or 2. These tenants will be migrated automatically in this phase. How[How this will affect your organization:organization:] Starting with this release, you can: 1. Manage Teams apps for selected … store for each of the app types: Microsoft, third-party and custom apps. What[What you need to do to prepare:prepare:] No action needed for phase 1 tenants with Global permission policy only. …

  20. · first version seen

Linked documentation

Microsoft pages the notice links to

The notice links to no Microsoft Learn or Support page that this installation reads.

No related evidence found in this installation's recent collection. This does not establish that no announcement exists.

Not confirmed here

What this page cannot tell you
  • Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 26 Oct 17:47 UTC · 267 of 272 readable · 266 fully read · documentation 469/469 current

No accounts or analytics; your preferences stay in your browser. Information, not advice. ChangeIntel is an independent tool and is not affiliated with or endorsed by Microsoft, Apple, Google, Broadcom (VMware), Jamf, Oracle, Mozilla, or any other vendor it covers. Product names are trademarks of their owners. Built by Evotec.