The requirements for distributing an App Store app or an app purchased in volume vary for computers and mobile devices.
Computer Requirements
To allow users to install App Store apps from Self Service via MDM or to allow App Store apps to be installed automatically you need the following:
A push certificate in Jamf Pro (For information, see Push Certificates.)
The Enable certificate-based authentication and Enable push notifications settings configured in Jamf Pro (For information, see Security Settings.)
Computers that are bound to a directory service or local user accounts that have been MDM-enabled (For information, see Directory Bindings and MDM-Enabled Local User Accounts.)
Note:Local user account are automatically MDM-enabled the first time an App Store app is installed automatically or via Self Service, or when a user-level configuration profile is installed via Self Service. With PreStage enrollment, the first local user account that is created is made MDM-enabled.
Apps assigned to computers or users via managed distribution (For more information, see Device-Assigned Managed Distribution and User-Assigned Managed Distribution.)
To allow users to install apps from the App Store (linked from Self Service), you need the following:
Computers that are bound to a directory service or local user accounts that have been MDM-enabled (For information, see Directory Bindings and MDM-Enabled Local User Accounts.)
Users may be prompted to enter an Apple Account
Per-App VPN connections are only applied to computers with macOS 11 or later. (For more information about how create a computer configuration profile with a Per-App VPN connection, see Computer Configuration Profiles.)
Mobile Device Requirements
To install an App Store app, an app purchased in volume, or an update, users may be prompted to enter an Apple Account.
Apps assigned to mobile devices or users via managed distribution (For more information, see Device-Assigned Managed Distribution and User-Assigned Managed Distribution.)
Per-App Networking configurations require an existing mobile device configuration profile with a VPN, DNS Proxy, or Content Filter payload configured. For more information, see Setting Up Per-App Networking for Mobile Devices.