Self-service: Install Apple App Store apps on macOS

[noahtalerman]

Goal

User story
As an IT admin on the Software page,
I want to add an Apple App Store app and make it available for my end users to install via Fleet Desktop
so that I can give end users (without an Apple ID) an easy way to install App Store apps that my organization ordered for them in Apple Business Manager.

Context

• Requestor(s): @mikermcneil
• Product designer: @marko-lisica

This is user story applies to this Fleet Q2 OKR:

• Increase product maturity and fulfill customer promises

Changes

Product

• UI changes: Figma link
• CLI changes: Figma link
• REST API changes: API design: Self-service: Install Apple App Store apps on macOS #22102
• Permissions changes: Maintainers and admins (team and global) can add self-service software. GitOps user can add self-service software via Fleet YAML. (Team roles can add software to teams they are assigned to). We already have "Add and delete software" row in the permissions guide.
• Changes to paid features or tiers: Available in Fleet Premium

Engineering

• Update existing guide on VPP to include references to Self service.
• Database schema migrations: TODO
• Load testing: TODO

ℹ️  Please read this issue carefully and understand it. Pay special attention to UI wireframes, especially "dev notes".

QA

Risk assessment

• Risk level: Low

Manual testing steps

Note: the majority of the testing will be covered in ticket #18867

1. In Fleet, add a VPP app to a team and ensure Self Service box is checked
2. Verify the app shows up in Fleet Desktop on the assigned host device
3. Verify app installs on host and behaves accordingly with all other Self Service expectations
4. check that license counts are reflected accordingly after installs

Testing notes

Confirmation

1. Engineer (@____): Added comment to user story confirming successful completion of QA.
2. QA (@____): Added comment to user story confirming successful completion of QA.

[noahtalerman]

Hey @marko-lisica, I filed this separate "Self-service: Install Apple App Store apps on macOS" story here.

I think let's bring this through "Settled" and estimation separately from the "Install Apple App Store apps on macOS" story (#18867)

cc @georgekarrv

[noahtalerman]

Hey @georgekarrv and @marko-lisica heads up, I pulled this story and the subtasks off the drafting board because it didn't make it into the engineering sprint.

I moved the story to feature fest so we can weigh it at the next feature fest.

[lukeheath]

@georgekarrv Should this story be in ready for release? It looks like all of the sub-tasks are.

[georgekarrv]

Switched it to Awaiting QA 👍

[lukeheath]

@georgekarrv Thanks! Also I see some outstanding TODOs in the engineering checklist that need to be revised.

[PezHub]

created additional issues discovered while testing and will revisit once they are resolved.
#21496
#21497
#21498

[PezHub]

QA Notes:
Confirmed all of the above issues have been resolved. QA Approved!

[noahtalerman]

• REST API changes: API design: Self-service: Install Apple App Store apps on macOS #19687
• Permissions changes: Maintainers and admins (team and global) can add self-service software. GitOps user can add self-service software via Fleet YAML. (Team roles can add software to teams they are assigned to.)

Hey @marko-lisica, can you please take this user story the rest of the way! It looks like there are two lingering checkboxes before we close it.

@zayhanlon and @Patagonia121 heads up that this customer request was shipped in Fleet 4.56. Leaving it open b/c updating the reference docs is still TODO.

[marko-lisica]

Hey @noahtalerman I just resolved conflicts and created a new PR for API changes: #22102.

I'm not sure why "Permissions changes" is still unchecked. I assume this is implemented?

[noahtalerman]

@marko-lisica thanks!

I'm not sure why "Permissions changes" is still unchecked. I assume this is implemented?

Do we need to update the permissions guide for this feature? Or, do we already have a line in the permissions table for adding software.

If we already have a line, can you please update the issue description to point to it? Thanks :)

I assigned you to the issue.

[noahtalerman]

Hey @marko-lisica just followed up here w/ a ping!

When you get the chance, please check out my above comment here and help w/ next steps to get this story closed. Thanks!

[noahtalerman]

Hey @marko-lisica just following up w/ another ping! as a reminder. Please let me know how/if I can help get this story closed :)

[marko-lisica]

Do we need to update the permissions guide for this feature? Or, do we already have a line in the permissions table for adding software.

If we already have a line, can you please update the issue description to point to it? Thanks :)

@noahtalerman We already have "Add and delete software" row in permissions guide. I've just updated issue description.

Still need a confirmation on API design PR.

[noahtalerman]

@marko-lisica thanks! Looks like @rachaelshaw followed up in your PR.

[noahtalerman]

TODO @rachaelshaw: Check wording and consistent language in API docs PR: #22102

[noahtalerman]

@rachaelshaw just following up w/ another ping!

When you get the chance, can you please review/merge the API docs PR here? It's the last bit before closing out this story.

[noahtalerman]

Docs are merged! #22102

[fleet-release]

Apple apps install,
Through Fleet's touch, no Apple ID,
Admin's wish fulfilled.

[noahtalerman]

Hey @zayhanlon heads up that this user story was shipped in Fleet 4.57 🚀