Use the site collection app catalog
Applies to: Office 365
Using site collection app catalogs, SharePoint tenant administrators can decentralize the management and scope the deployment of SharePoint add-ins and SharePoint Framework solutions to specific sites.
Why site collection app catalogs
Previously, all add-ins and SharePoint Framework solutions had to be managed centrally in the tenant app catalog. While tenant administrators could delegate the access to other people in the organization, a deployed package was visible on all site collections. SharePoint offered no supported way of deploying add-ins and SharePoint Framework solutions only to specific sites.
With the introduction of site collection app catalogs, tenant administrators can enable app catalog on the specific sites. Once enabled, site collection administrators can deploy SharePoint add-ins and SharePoint Framework solutions that will be available only in that particular site collection.
The following schema illustrates using site collection app catalogs:
In your Office 365 tenant you have a tenant app catalog. Solutions deployed to this app catalog, can be installed in any site collection in the tenant. Tenant administrators can choose to enable site collection app catalogs on specific site collections. Solutions deployed to the site collection app catalogs can only be installed in that particular site collection.
Supported capabilities
Support for both SharePoint add-ins and SharePoint Framework packages
In site collection app catalogs, just as in tenant app catalog, you can deploy both SharePoint add-ins and SharePoint Framework solutions (.sppkg).
Including assets in solution packages
SharePoint Framework solution packages that contain assets, can be deployed to site collection app catalogs. Included assets will be deployed to a preconfigured document library in the same site collection as where the site collection app catalog is located. If the Office 365 Public CDN is configured, assets will be served from the CDN. Otherwise, assets will be served directly from the document library.
Tenant-scoped deployment
When deploying SharePoint Framework solutions that support tenant-wide deployment to a site collection app catalog, you will be prompted if you want to make this solution available to all sites in the organization. Despite the wording, if you check this box, the solution will be available immediately only in the same site collection as where the app catalog is. Other site collections in your organizations will not be able to use the solution. If you don't check this option, you will have to explicitly install the solution in your site, before you will be able to use it.
Current limitations
Configure and manage site collection app catalogs
You can configure and manage site collection app catalogs using the SharePoint Online Management Shell.
Note
Before you can manage site collection app catalogs in your tenant, ensure that you have installed SharePoint Online Management Shell from November 2017 or newer.
Alternatively, you can use the CLI for Microsoft 365 to manage your SharePoint site collection app catalogs. The CLI for Microsoft 365 is a cross-platform command line interface that can be used on any platform, including Windows, MacOS and Linux. Using PnP PowerShell to create the app catalog or remove the app catalog is also an option when using Windows.
Note
PnP PowerShell is an open-source solution with active community providing support for it. There is no SLA for the open-source tool support from Microsoft.
Note
The CLI for Microsoft 365 is an open-source solution with active community providing support for it. There is no SLA for the open-source tool support from Microsoft.
Create a site collection app catalog
Note
Before running the following script, connect to your SharePoint Online tenant using the Connect-SPOService cmdlet when using the SharePoint Online PowerShell. Also ensure that you have a tenant app catalog created in your tenant (Multi-geo customers will need to create a tenant app catalog for each geo they wish to use a site collection app catalog). If you don't, the cmdlet will fail with the following error:
Cannot invoke method or retrieve property from null object. Object returned by the
following call stack is null. "TenantAppCatalog
RootWeb
GetSiteByUrl
new Microsoft.Online.SharePoint.TenantAdministration.Tenant()
"
Alternatively, if you are using the CLI for Microsoft 365, you must first connect to your Microsoft 365 tenant using the m365 login command. With PnP PowerShell you would use Connect-PnPOnline -Url https://<tenant>-admin.sharepoint.com -UseWebLogin to set up the connection.
Caution
Account used to create App Catalog Site Collection, must be Site Collection Administrators on both the tenant-level App Catalog and the target Site Collection
To create a site collection app catalog, use the Add-SPOSiteCollectionAppCatalog cmdlet passing the site collection where the app catalog should be created as the -Site parameter.
Add-SPOSiteCollectionAppCatalog -Site https://contoso.sharepoint.com/sites/marketing
Alternatively, use PnP PowerShell to add the site app catalog functionality to your site after having connected to the SharePoint Online Admin site:
Add-PnPSiteCollectionAppCatalog -site https://contoso.sharepoint.com/sites/marketing
Alternatively, use the spo site appcatalog add command if you are using the CLI for Microsoft 365:
m365 spo site appcatalog add --siteUrl https://contoso.sharepoint.com/sites/marketing
After executing this script, the Apps for SharePoint library will be added to your site collection where you will be able to deploy SharePoint add-ins and SharePoint Framework solutions.
Disable the site collection app catalog
Note
Before running the following script, connect to your SharePoint Online tenant using the Connect-SPOService cmdlet for the SharePoint Online PowerShell, Connect-PnPOnline -Url https://<tenant>-admin.sharepoint.com -UseWebLogin for PnP PowerShell or m365 login command for the CLI for Microsoft 365 to connect to your Microsoft 365 tenant.
To disable the site collection app catalog in your site collection, use the Remove-SPOSiteCollectionAppCatalog cmdlet passing the site collection where the app catalog should be disabled as the -Site parameter. Alternatively, if you have your site collection's ID, you can use the Remove-SPOSiteCollectionAppCatalogById cmdlet instead.
Note
Despite the naming, the Remove-SPOSiteCollectionAppCatalog and Remove-SPOSiteCollectionAppCatalogById cmdlets don't remove the site collection app catalog from the site collection. Instead, they disable it so that it's not possible to deploy or use any solutions deployed in it.
Remove-SPOSiteCollectionAppCatalog -Site https://contoso.sharepoint.com/sites/marketing
Alternatively, use PnP PowerShell to remove the site app catalog functionality from your site after having connected to the SharePoint Online Admin site:
Remove-PnPSiteCollectionAppCatalog -site https://contoso.sharepoint.com/sites/marketing
Alternatively, use the spo site appcatalog remove command if you are using the CLI for Microsoft 365
m365 spo site appcatalog remove --url https://contoso.sharepoint.com/sites/marketing
After executing this script, the Apps for SharePoint library will be still visible in your site collection, but you will not be able to deploy or use any solutions deployed in it.
Considerations
Governance
To list all site collections in the tenant that have the site collection app catalog enabled, use the URL https://<tenant-app-catalog-URL>/Lists/SiteCollectionAppCatalogs/AllItems.aspx.
Security
Before deploying solutions to site collection app catalogs, site collection administrators should verify that these solutions meet organizational policies. Although solutions installed in site collection app catalogs can only be used in these particular site collections, they can potentially access resources from other sites in the tenant so administrators should ensure that the solutions they are about to deploy work as intended.