Macos App Check User Purchase

Macos App Check User Purchase Online
Macos App Check User Purchase List
Macos App Check User Purchase Account

-->

With that said, expect Apple to make macOS Big Sur available via the Mac App Store for direct download on supported devices to perform the upgrade to macOS 11.0. Check back here when macOS Big Sur.
Presenting Apple Music on Mac. The new Apple Music app is the ultimate music streaming experience on Mac. 1 Explore a library of 60 million songs, discover new artists and tracks, find the perfect playlist, download and listen offline, or enjoy all the music you’ve collected over the years. And find it all in your music library on all your devices.
File Name: EPSE82.50ALLapp.zip: Product: Endpoint Security Client: Version: E82: Minor Version: E82.50: OS: macOS 10.15: Build Number: MD5.

Apple lets you purchase multiple licenses for an app that you want to use in your organization on iOS/iPadOS and macOS devices using Apple Business Manager or Apple School Manager. You can then synchronize your volume purchase information with Intune and track your volume-purchased app use. Purchasing app licenses helps you efficiently manage apps within your company and retain ownership and control of purchased apps.

Microsoft Intune helps you manage apps purchased through this program by:

Having said that, the blog describes a way to check an in-app purchase and not the purchase of the app. So, I was wondering if there's a way (or API) to check the purchase of the app? If yes, I could store this info in Keychain and access it whenever the user opens the app. If there is no such API then I was thinking to add an in-app purchase. Mar 24, 2020 Universal purchase support for Mac apps that was announced on February 5, 2020 is now officially available, Apple announced yesterday via a blog post on its developer portal. Universal binaries have long been available on iOS, allowing developers to create a single binary which conveniently combines the code, user interface logic and visual assets for an app’s iPhone and iPad versions into. The Sensei app for Mac is a piece of software that helps you to monitor, analyze, and improve your Mac’s performance. Developed by Cindori, Sensei is comparatively new to the world of macOS cleaners. However, this new-generation Mac performance tool comes with the right set of features that every macOS Pro user has ever wanted.

Synchronizing location tokens you download from Apple Business Manager.
Tracking how many licenses are available and have been used for purchased apps.
Helping you install apps up to the number of licenses you own.

Additionally, you can synchronize, manage, and assign books you purchased from Apple Business Manager with Intune to iOS/iPadOS devices. For more information, see How to manage iOS/iPadOS eBooks you purchased through a volume-purchase program.

What are location tokens?

Location tokens are also known as Volume Purchase Program (VPP) tokens. These tokens are used to assign and manage licenses purchased using Apple Business Manager. Content Managers can purchase and associate licenses with location tokens they have permissions to in Apple Business Manager. These location tokens are then downloaded from Apple Business Manager and uploaded in Microsoft Intune. Microsoft Intune supports uploading multiple location tokens per tenant. Each token is valid for one year.

How are purchased apps licensed?

Purchased apps can be assigned to groups using two types of licenses that Apple offers for iOS/iPadOS and macOS devices.

Device Licensing	User Licensing
App Store sign-in	Not required.	Each end user must use a unique Apple ID when prompted to sign in to App Store.
Device configuration blocking access to App Store	Apps can be installed and updated using Company Portal.	The invitation to join Apple VPP requires access to App Store. If you have set a policy to disable App Store, user licensing for VPP apps will not work.
Automatic app update	As configured by the Intune admin in Apple VPP token settings. If the assignment type is available for enrolled devices, available app updates can also be installed from the Company Portal by selecting the Update action on the app details page.	As configured by end user in personal App Store settings. This cannot be managed by the Intune admin.
User Enrollment	Not supported.	Supported using Managed Apple IDs.
Books	Not supported.	Supported.
Licenses used	1 license per device. The license is associated with the device.	1 license for up to 5 devices using the same personal Apple ID. The license is associated with the user. An end user associated with a personal Apple ID and a Managed Apple ID in Intune consumes 2 app licenses.
License migration	Apps can migrate silently from user to device licenses.	Apps cannot migrate from device to user licenses.

Note

Company Portal does not show device-licensed apps on User Enrollment devices because only user-licensed apps can be installed on User Enrollment devices.

What app types are supported?

You can purchase and distribute public as well as private apps using Apple Business Manager.

Store apps: Using Apple Business Manager, Content Managers can buy both free and paid apps that are available in the App Store.
Custom Apps: Using Apple Business Manager, Content Managers can also buy Custom Apps made available privately to your organization. These apps are tailored to your organization's specific needs by developers with whom you work directly. Learn more about how to distribute Custom Apps.

Prerequisites

An Apple Business Manager or Apple School Manager account for your organization.
Purchased app licenses assigned to one or more location tokens.
Downloaded location tokens.

Important

A location token can only be used with one device management solution at a time. Before you start to use purchased apps with Intune, revoke and remove any existing location tokens used with other mobile device management (MDM) vendor.
A location token is only supported for use on one Intune tenant at a time. Do not reuse the same token for multiple Intune tenants.
By default, Intune synchronizes the location tokens with Apple twice a day. You can initiate a manual sync at any time from Intune.
After you have imported the location token to Intune, do not import the same token to any other device management solution. Doing so might result in the loss of license assignment and user records.

Migrate from Volume Purchase Program (VPP) to Apps and Books

If your organization has not migrated to Apple Business Manager or Apple School Manager yet, review Apple's guidance on migrating to Apps and Books before proceeding to manage purchased apps in Intune.

Important

For the best migration experience, migrate only one VPP purchaser per location. If each purchaser migrates to a unique location, all licenses — assigned and unassigned — will move to Apps and Books.
Do not delete the existing legacy VPP token in Intune or apps and assignments associated with existing legacy VPP token in Intune. These actions will require all app assignments to be recreated in Intune.

Migrate existing purchased VPP content and tokens to Apps and Books in Apple Business Manager or Apple School Manager as follows:

Invite VPP purchasers to join your organization and direct each user to select a unique location.
Ensure that all VPP purchasers within your organization have completed step 1 before proceeding.
Verify that all purchased apps and licenses have migrated to Apps and Books in Apple Business Manager or Apple School Manager.
Download the new location token by going to Apple Business (or School) Manager > Settings > Apps and Books > My Server Tokens.
Update the location token in Microsoft Endpoint Manager admin center by going to Tenant administration > Connectors and tokens > Apple VPP tokens and manually upload the token.

Upload an Apple VPP or location token

Sign in to the Microsoft Endpoint Manager admin center.
Select Tenant administration > Connectors and tokens > Apple VPP tokens.
On the list of VPP tokens pane, select Create.
On the Create VPP token pane, specify the following information:
- VPP token file - If you haven't already, sign up for Apple Business Manager or Apple School Manager. After you sign up, download the Apple VPP token for your account and select it here.
- Apple ID - Enter the Managed Apple ID of the account associated with the uploaded token.
- Take control of token from another MDM - Setting this option to yes allows the token to be reassigned to Intune from another MDM solution.
- Token Name - An administrative field for setting the token name.
- Country/Region - Select the VPP country/region store. Intune synchronizes VPP apps for all locales from the specified VPP country/region store.
  Warning
  Changing the country/region will update the apps metadata and App Store URL on next sync with the Apple service for apps created with this token. The app will not be updated if it does not exist in the new country/region store.
- Type of VPP account - Choose from Business or Education.
- Automatic app updates - Choose from On or Off to enable automatic updates. When enabled, Intune detects the VPP app updates inside the app store and automatically pushes them to the device when the device checks in.
  Note
  Automatic app updates for Apple VPP apps will automatically update for both Required and Available install intents. For apps deployed with Available install intent, the automatic update generates a status message for the IT admin informing that a new version of the app is available. This status message is viewable by selecting the app, selecting Device Install Status, and checking the Status Details.
- I grant Microsoft permission to send both user and device information to Apple. - You must select I agree to proceed. To review what data Microsoft sends to Apple, see Data Intune sends to Apple.
When you are done, select Create. The token is displayed in the list of tokens pane.

Synchronize a VPP token

You can synchronize the app names, metadata and license information for your purchased apps in Intune by choosing Sync for a selected token.

Assign a volume-purchased app

Select Apps > All apps.
On the list of apps pane, choose the app you want to assign, and then choose Assignments.
On the App name - Assignments pane, choose Add group then, on the Add group pane, choose an Assignment type and choose the Azure AD user or device groups to which you want to assign the app.
For each group you selected, choose the following settings:
- Type - Choose whether the app will be Available (end users can install the app from the Company Portal), or Required (end user devices will automatically get the app installed).
- License type - Choose from User licensing, or Device licensing.
Once you are done, choose Save.

Note

The Available deployment intent is not supported for device groups, only user groups are supported. The list of apps displayed is associated with a token. If you have an app that is associated with multiple VPP tokens, you see the same app being displayed multiple times; once for each token.

Note

Intune (or any other MDM for that matter) does not actually install VPP apps. Instead, Intune connects to your VPP account and tells Apple which app licenses to assign to which devices. From there, all the actual installation is handled between Apple and the device.

End-User Prompts for VPP

The end-user will receive prompts for VPP app installation in a number of scenarios. The following table explains each condition:

#	Scenario	Invite to Apple VPP program	App install prompt	Prompt for Apple ID
1	BYOD – user licensed (not User Enrollment device)	Y	Y	Y
2	Corp – user licensed (not supervised device)	Y	Y	Y
3	Corp – user licensed (supervised device)	Y	N	Y
4	BYOD – device licensed	N	Y	N
5	CORP – device licensed (not supervised device)	N	Y	N
6	CORP – device licensed (supervised device)	N	N	N
7	Kiosk mode (supervised device) – device licensed	N	N	N
8	Kiosk mode (supervised device) – user licensed	---	---	---

Note

It is not recommended to assign VPP apps to Kiosk-mode devices using user licensing.

Revoking app licenses

You can revoke all associated iOS/iPadOS or macOS volume-purchase program (VPP) app licenses based on a given device, user, or app. But there are some differences between iOS/iPadOS and macOS platforms.

iOS/iPadOS	macOS
Remove app assignment	When you remove an app that was assigned to a user, Intune reclaims the user or device license and uninstalls the app from the device.	When you remove an app that was assigned to a user, Intune reclaims the user or device license. The app is not uninstalled from the device.
Revoke app license	Revoking an app license reclaims the app license from the user or device. You must change the assignment to Uninstall to remove the app from the device.	Revoking an app license reclaims the app license from the user or device. The macOS app with revoked license remains usable on the device, but cannot be updated until a license is reassigned to the user or device. According to Apple, such apps are removed after a 30-day grace period. However, Apple does not provide a means for Intune to remove the app using Uninstall assignment action.

Note

Intune reclaims app licenses when an employee leaves the company and is no longer part of the AAD groups.
When assigning a purchased app with Uninstall intent, Intune both reclaims the license and uninstalls the app.
App licenses are not reclaimed when a device is removed from Intune management.

Deleting VPP tokens

You can delete an Apple Volume Purchasing Program (VPP) token using the console. This may be necessary when you have duplicate instances of a VPP token. Deleting a token will also delete any associated apps and assignment. However, deleting a token does not revoke app licenses or uninstall apps.

Note

Intune cannot revoke app licenses after a token has been deleted.

To revoke the license of all VPP apps for a given VPP token, you must first revoke all app licenses associated with the token, then delete the token.

Renewing app licenses

You can renew an Apple VPP token by downloading a new token from Apple Business Manager or Apple School Manager and updating the existing token in Intune.

To renew an Apple VPP token, use the following steps:

Navigate to Apple Business Manager or Apple School Manager.
Download the new token in Apple Business (or School) Manager, by selecting Settings > Apps and Books > My Server Tokens.
Update the token in Microsoft Endpoint Manager admin center by selecting Tenant administration > Connectors and tokens > Apple VPP tokens. Then, manually upload the token.

Note

You must download a new Apple VPP or location token from Apple Business Manager and update the existing token within Intune when the user, who set up the token in Apple Business Manager, changes their password or the user leaves your Apple Business Manager organization. Tokens that are not renewed will show 'invalid' status in Intune.

Deleting a VPP app

Currently, you cannot delete an iOS/iPadOS VPP app from Microsoft Intune.

Assigning custom role permissions for VPP

Access to Apple VPP tokens and VPP apps can be controlled independently using permissions assigned to custom administrator roles in Intune.

To allow an Intune custom role to manage Apple VPP tokens, in Microsoft Endpoint Manager admin center, select Tenant administration > Connectors and tokens > Apple VPP tokens, assign permissions for Managed apps.
To allow an Intune custom role to manage apps purchased using iOS/iPadOS VPP tokens under Apps > All apps, assign permissions for Mobile apps.

Additional information

Apple provides direct assistance to create and renew VPP tokens. For more information, see Distribute content to your users with the Volume Purchase Program (VPP) as part of Apple's documentation.

If Assigned to external MDM is indicated in the Intune portal, then you (the Admin) must remove the VPP token from the 3rd party MDM before using the VPP token in Intune.

If status is Duplicate for a token, then multiple tokens with the same Token Location have been uploaded. Remove the duplicate token to begin syncing the token again. You can still assign and revoke licenses for tokens that are marked as duplicate. However, licenses for new apps and books purchased may not be reflected once a token is marked as duplicate.

Frequently asked questions

How many tokens can I upload?

You can upload up to 3,000 tokens in Intune.

How long does the portal take to update the license count once an app is installed or removed from the device?

The license should be updated within a few hours after installing or uninstalling an app. Note that if the end user removes the app from the device, the license is still assigned to that user or device.

Is it possible to oversubscribe an app and, if so, in what circumstance?

Yes. The Intune admin can oversubscribe an app. For example, if the admin purchases 100 licenses for app XYZ, and then targets the app to a group with 500 members in it. The first 100 members (users or devices) will get the license assigned to them, the rest of the members will fail on license assignment.

Next steps

See How to monitor apps for information to help you monitor app assignments.

See How to troubleshoot apps for information on troubleshooting app-related issues.

What you can do in your purchase history

See a complete list of your purchases from the App Store and iTunes Store.
Request a refund.
Report a problem with an app or other item.
See the date when you bought an item or the date when an order was billed.
See which payment method was charged for an item.
Resend a receipt to yourself via email.

If you need to cancel a subscription or redownload something that you purchased, you don't need to view your purchase history.
Cancel a subscription >
Redownload apps, music, movies, and more >

See your purchase history on your iPhone, iPad, or iPod touch

Open the Settings app.
Tap your name, then tap iTunes & App Store.
Tap your Apple ID, then tap View Apple ID. You might be asked to sign in.
Scroll to Purchase History and tap it. If you want to see purchases that you made more than 90 days prior, tap Last 90 Days, then select a date range.
Find the item, then tap Total Billed.
From here, you can do these things:

To request a refund or report a problem with the item, tap the item, then tap 'Report a Problem' and describe your issue.
To see the date when you bought the item and the device you used to buy it, tap the item.
To send yourself a new email receipt, tap Resend. You can’t send a receipt for a free item.

Learn what to do if you don’t see the item you’re looking for or if you see unexpected charges.

See your purchase history on your computer

Open the Music app or iTunes. From the menu bar at the top of the screen, choose Account, then click View My Account.
On the Account Information page, scroll down to Purchase History. Next to Most Recent Purchase, click See All.
Find the item. It might take a moment for your Purchase History to appear. If you want to see purchases that you made more than 90 days prior, click Last 90 Days, then select a date range.
From here, you can do these things:

To request a refund or report a problem with the item, click More, then click 'Report a Problem' and describe your issue.
To send yourself a new email receipt, click the order ID, then click Resend. You can’t send a receipt for a free item.
To see which device you used to purchase the item, click More.

Learn what to do if you don’t see the item you’re looking for or if you see unexpected charges.

See recent purchases on any device

Go to reportaproblem.apple.com.
Sign in with your Apple ID and password.
A list of your recent purchases appears. From here, you can view a receipt, request a refund, or report a problem with an item. If you’re not sure what you were charged for but you know the exact amount, search for the amount.

If you want to see charges for Apple Music, Apple News+, or iCloud storage, or charges from older purchases, view your purchase history through Settings or the App Store.

Learn what to do if you don’t see the item you’re looking for or if you see unexpected charges.

If you can't find an item in your purchase history

If you can’t find the item you’re looking for, try these things before you contact Apple.

Find out if a family member purchased the item

Macos App Check User Purchase Online

If you use Family Sharing, your purchase history shows purchases that you made using your Apple ID, but you won't see what other family members bought. To see what other family members bought, sign in with their Apple ID.

If you want to control what kids buy, use Ask to Buy or Restrictions.

Turn on Ask to Buy.

Use Restrictions on your iPhone, iPad, or iPod touch.

Check if you purchased the item with a different Apple ID

If you don't see an item in your purchase history, you might have been signed in with a different Apple ID when you made the purchase. Sign in with that Apple ID to check if your purchases were billed to that account.

If you still can’t find your purchase, contact Apple Support.

If you see purchases that you don't recognize or unexpected charges

If you see items in your purchase history that you don't remember buying, check if someone else who uses your device, such as a family member, bought the item. If someone else is using your Apple ID and password, change your Apple ID password.
If you don't recognize a charge on your statement from your bank or financial institution, try these steps.
If you still need help, contact Apple Support.

Learn more

Macos App Check User Purchase List

If you see an in-app purchase in your purchase history but you don't see it in the app, learn how to restore in-app purchases.
Request a refund.
Before you can request a refund, you might need to pay for pending purchases or fix a problem with your payment method.
Learn about how App Store and iTunes Store purchases are billed.
If you received a suspicious email notification about a purchase, the email might not be from Apple or reflect actual charges to your account. Learn how to identify legitimate App Store or iTunes Store emails.

Macos App Check User Purchase Account

Store availability and features might vary by country or region. Learn what’s available in your country or region.