I was having trouble getting ANY VPP apps to deploy on Big Sur machines. I discovered that in Big Sur, in the "Restrictions" configuration profile, I had to UNtick "Require admin password to install or update apps". This was not needed in Catalina, but VPP apps will not deploy on our Big Sure Macs unless this box is unticked. See attached screenshot.
Hope this helps someone!
@alessio.tedesco I usually cancel any failed command for the device in Jamf Pro. Sometimes I run a recon command on the device via terminal, or force an inventory. Other times I have clicked "Edit" for the App in question, and then "Save" again, and that seems to kick it off. In the end sometimes I delete the device record in Jamf Pro, and erase and reinstall the OS, then reenroll. That final option usually does the trick if all else fails.
Rich Trouton has a script to automate clearing failed mdm commands. I run this once per day:
This setting also does not appear to be related to the "Bag Load Failed" error message that we are receiving with self service VPP installs on Big Sur. We use Securly and their engineer just tried pointing me to this article but we have not had that setting checked in our environment.
Securly & Big Sur VPP Bag Load Failed error
We ended up just turning off user access to the App Store completely by checking "Restrict App Store to MDM installed apps and software updates". Generally, we don't allow any software that isn't licensed by the company, so users should have no need to access the App Store.
For Big Sur, it's still necessary to turn off "Require admin password to install or update apps", but not an issue because users can't access the App Store in the first place.