Account level Zoom marketplace app management best practices?

[noname]

Hi,

I am a Zoom admin for my org and i'm looking for some guidance/best practices around managing account level apps. We've seen more app requests from users that only allows a Zoom admin to install the app and a lot of them needs the installer to have access to the 3rd party app host to finish the configuration.

We don't want to give users zoom admin rights or custom admin roles to be able to install those apps, it's not secure and the solution is not scalable as the request volume increases but at the same time, we as admins don't want to be the ones to install them because we don't have access to the 3rd party system to configure and establish the connection.

What's the recommended way of managing these apps?

Thanks!

[colegs]

Hello,

Your question really has 2 parts: Do you have to be an admin to install the applications, and What are the best practices.

For the first question, you do not actually have to be an admin to install the application, but an admin has to initially pre-approve the application for others to install.  When they do that,  they will be asked if they want to allow all users to install the application, or only a select group of users to install it.

For the second question, if the application has a requirement for elevated permissions (the ability to view or modify other user's information), the user will not be able to install the application if they are not in a role that has those permissions.  The best practice here is to confirm that you are limiting users with the elevated permissions to only those that have a business need for those permissions.  Therefore, if an application has a requirement to be able to update people's meetings but the user has not business need to update other people's meetings, perhaps you should evaluate what the application is doing and if they really should be using it.

To determine what permissions are required by an application, you can either look at the App Permissions on the install page, which requires some interpretation, or have a user try to install it which will generate an explicit list of permissions the user is missing and are required to install the application.

Please click on Accept Solution if this answers your question!

Thanks.

[GeorgeAnderson1]

Hi,

Managing a Zoom Marketplace app at the account level requires careful attention to security, permissions, and functionality. Here are some best practices:

1. Assign Proper Permissions:

   • Use Zoom’s role management system to ensure only authorized users can install or manage apps.

2. Review App Scopes:

   • Always check and limit app scopes to what is absolutely necessary to reduce security risks.

3. Monitor App Usage:

   • Regularly review the apps installed in your account and their activity logs for unusual behavior.

4. Enable Two-Factor Authentication (2FA):

   • Secure your account and apps by enabling 2FA for all users.

5. Keep Apps Updated:

   • Always use the latest version of third-party apps to ensure compatibility and security.

For more insights on app management and other tech-related tips, you can Click here to explore additional resources.