windows-itpro-docs/store-for-business/manage-users-and-groups-microsoft-store-for-business.md

title, description, ms.assetid, ms.reviewer, manager, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, author, ms.author, ms.topic, ms.localizationpriority, ms.date

title	description	ms.assetid	ms.reviewer	manager	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	author	ms.author	ms.topic	ms.localizationpriority	ms.date
Manage user accounts in Microsoft Store for Business and Microsoft Store for Education (Windows 10)	Microsoft Store for Business and Microsoft Store for Education manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups.	5E7FA071-CABD-4ACA-8AAE-F549EFCE922F		dansimp	w10	manage	library	store	TrudyHa	TrudyHa	conceptual	medium	07/21/2021

Manage user accounts in Microsoft Store for Business and Education

Applies to

• Windows 10

Important

Microsoft Store for Business and Microsoft Store for Education will be retired in the first quarter of 2023. You can continue to use the current capabilities of free apps until that time. For more information about this change, see Evolving the Microsoft Store for Business and Education.

Microsoft Store for Business and Education manages permissions with a set of roles. Currently, you can assign these roles to individuals in your organization, but not to groups.

Why Azure AD accounts?

For organizations planning to use the private store feature with Store for Business, we recommend that you also configure cloud domain join. This provides a seamless integration between the identity your admin and employees will use to sign in to Windows and Microsoft Store for Business.

Azure AD is an Azure service that provides identity and access management capabilities using the cloud. It is primarily designed to provide this service for cloud- or web-based applications that need to access your local Active Directory information. Azure AD identity and access management includes:

• Single sign-on to any cloud and on-premises web app.
• Works with multiple platforms and devices.
• Integrate with on-premises Active Directory.

For more information on Azure AD, see About Office 365 and Azure Active Directory, and Intro to Azure: identity and access.

Add user accounts to your Azure AD directory

If you created a new Azure AD directory when you signed up for Store for Business, you'll have a directory set up with one user account - the global administrator. That global administrator can add user accounts to your Azure AD directory. However, adding user accounts to your Azure AD directory will not give those employees access to Store for Business. You'll need to assign Store for Business roles to your employees. For more information, see Roles and permissions in the Store for Business.

You can use the Office 365 admin dashboard or Azure management portal to add user accounts to your Azure AD directory. If you'll be using Azure management portal, you'll need an active subscription to Azure management portal.

For more information, see:

• Add user accounts using Office 365 admin dashboard
• Add user accounts using Azure management portal