Export Enterprise application with assigned groups

Question

Hi,

We're doing a cleanup of our Entr Apps (330 in total) and was looking for a way to export these apps with assigned groups included, so we can delete the ones that have no group assignments.

Thanks!

Answer 1

Hi @Vlad Toma ,

Thanks for reaching out.

You can use the Azure AD Graph API to retrieve all the service app role assignments for all enterprise applications and then filter the data to show only the enterprise applications that have group assignments

Here is a sample script that retrieves all the service app role assignments for all enterprise applications and filters the data to show only the enterprise applications that have group assignments:

$assignments = Get-AzureADServiceAppRoleAssignment -All $true 
$assignments | Where {$_.PrincipalType -eq "Group"} | Select PrincipalDisplayName, PrincipalType, ResourceDisplayName, Resource | Export-Csv -Path "C:\temp\EnterpriseAppsWithGroups.csv" -NoTypeInformation

You can then use the exported CSV file to delete the enterprise applications that have no group assignments.

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.

Answer 2

The following link can help you on finding the users and groups assigned to the AD Application

Display users and groups assigned to an Application Proxy application

---

--please don't forget to upvote and Accept as answer if the reply is helpful--