Restricted Capabilities

AdminStudio 2023 | 25.0 | MSIX Editor

If your app declares any restricted capabilities, you must provide info in order to be approved to publish the app.

The following table lists the restricted capabilities:

Restricted Capabilities
Option	Description
Elevation	The Elevation restricted capability allows apps that are created by Flexera partners and enterprises to preserve existing desktop functionality that requires auto-elevation on launch or during an app's lifetime.
Enterprise Authentication	The Enterprise Authentication capability is typically used in line-of-business apps that connect to servers within an enterprise. You donot need this capability for generic communication across the Internet.
Full Trust Permission Level	The Full Trust Permission Level restricted capability allows apps to run at the full trust permission level on the user's machine.
Shared User Certificates	The Shared User Certificates capability enables an app to add and access software and hardware-based certificates in the Shared User store, such as certificates stored on a smart card. This capability is typically used for financial or enterprise apps that require a smart card for authentication.
Package Query	The Package Query device capability allows apps to gather information about other apps.
Package Management	The Package Management restricted capability allows app to manage other apps directly.
Local System Services	The Local System Services restricted capability allows applications that are created by Flexera partners and enterprises to install one or more Local System services along with the app (that is, your application can declare the StartAccount for the services to be LocalSystem). This scenario also requires the packagesServices capability.
Package Services	The Package Services restricted capability allows applications that are created by Flexera partners and enterprises to declare the extension in its package manifest so that it can install one or more services along with the app. These services can be configured to run under the Local Service, Network Service or Local System accounts. Local Service and Network Service services only require the packageServices capability. Local System services require both the packageServices and localSystemServices capabilities.