Account used to install a new app

[friell]

I will be installing a new app for all users with a service account with admin permissions. Will that service account need to stay an admin after the account is installed for the app to continue to work?

All that I've read says that an owner or admin account needs to create the account and that the account needs to stay active for the app to continue to work. But I haven't seen anything that says it needs to stay and admin account. Will it break the app if I demote it after?

Alternatively, what are the specific permissions needed in an admin account to be able to install an app, but do nothing else? I would be willing to go the route of creating a new admin role if I'd be able to limit the admin permissions for it.

[fzmuhammad]

Sure! Here's a concise summary:

You can install a Zoom app using a service account with admin rights, and the account can usually be demoted after installation as long as it stays active and the app doesn't require ongoing admin-level actions. To minimize risk, you can create a custom admin role with only the necessary permissions for app installation and nothing else.