Plan for apps for SharePoint 2013(You need to ensure that users can install apps from the App Catal)

Plan for apps for SharePoint 2013

You need to ensure that users can install apps from the App Catalog.(Answer: Manage Web Site and Create Subsites)

[The following website is a designed to help setup a governance plan for setting up Sharepoint.]

Do you want to control who can install apps for SharePoint?

At the minimum, a user must have the Manage Web site and Create Subsites permissions to install an app for SharePoint. By default, these permissions are available only to users who have the Full Control permission level or who are in the Site Owners group.

https://technet.microsoft.com/en-us/library/fp161237.aspx

Governance choices for apps for SharePoint



These choices change whether site owners in your environment can purchase and install or add apps from the SharePoint Store or the App Catalog. The following illustration shows the results of these choices for site owners.

Flowchart with decisions about purchasing apps

Plan
app configuration settings

Before you use apps for SharePoint in your environment, you have to configure your environment to support them. If you don’t configure your environment, site owners who try to install and use apps for SharePoint receive error messages. For all apps for SharePoint,
you must set up a Domain Name Services (DNS) domain name to provide a host name for the installed apps. By using a separate domain name, apps for SharePoint are separated from SharePoint sites to prevent unauthorized access to user data and to reduce the possibility
of cross-site scripting attacks. The use of separate URLs for apps for SharePoint and SharePoint sites is called app isolation. You also need a DNS record so that the domain name can get correctly resolved. You can create one of two of the following
types of DNS records for app for SharePoint URLs:

A wildcard Canonical Name (CNAME) record that points to the host domain assigned to the SharePoint farm.

A wildcard A record that points to the IP address for the SharePoint farm.

Choose the type of record to use to point from the app domain to the SharePoint farm domain.

The following illustration shows the types of records that you can use to point from the app domain to the SharePoint farm domain.

Illustration of a type of record that points from the app domain to a SharePoint farm domain



In addition to setting up the DNS domain to support apps in your environment, you also have to configure the following: