Share via

Assign Teams app permission policy by AAD group

Rolando Virjan 85 Reputation points
2023-03-13T15:53:25.5466667+00:00

Is there a way to assign custom Teams app permission policies to members of an AAD group? i.e. When a user is added to an AAD group an associated custom Teams app appears for the user.

I've successfully tested our first custom app in our tenant directly assigning app permission policy directly to users in the Teams admin center. I would like to open it up to a large group of users that will change over time but not the entire org. I'm searching for a way to manage this. Is there a replacement method for deprecated cmdlet "New-CsTeamsAppPermissionPolicy"? It looks like this would have achieved what I am looking for.

Microsoft Security | Microsoft Entra | Microsoft Entra ID
Microsoft Teams | Microsoft Teams for business | Other

Answer accepted by question author

  1. SokiGuo-MSFT 31,741 Reputation points Microsoft External Staff
    2023-03-14T06:38:27.18+00:00

    Hi @Rolando Virjan

    As Vasil Michev said, there is no command to assign the Apply Permissions Group Policy assignment in the official documentation. For large organizations, you can work on policies in bulk. (Including assigning policies to groups, policy packages to groups).

    For more examples and details, please refer to: Ways to assign policies.
    User's image

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    1 person found this answer helpful.

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Norbert Friedli 10 Reputation points
    2024-03-28T04:58:12.71+00:00

    Just wondering if allowing in the global App permission policy and denying (not allowing) in the App Setup Policy would be a workaround for this? So users would have the permission to use the App but not install it.

    But why can't the App permission policy be assigned to groups? MAJOR oversight in my view.

    2 people found this answer helpful.
  2. Vasil Michev 126.1K Reputation points MVP Volunteer Moderator
    2023-03-13T16:00:01.01+00:00

    Unfortunately the group policy assignment feature does not support app permission policies. You can however use the batch policy assignment method, as detailed here: https://learn.microsoft.com/en-us/microsoftteams/assign-policies-users-and-groups#assign-a-policy-to-a-batch-of-users

    1 person found this answer helpful.

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.