How can I generate a report on Applications that would be impacted by Azure AD Graph deprecation

Question

With retirement of Azure AD Graph fast approaching, I am trying to see what applications would be affected in my tenant. What Powershell script can I use to export a list of app's into a csv file?

Answer 1

Hello @Deon Van Heerden , you can list applications exposing Azure AD Graph permissions using the following Microsoft Graph PowerShell script. You will also need MSAL.PS.

$MsalToken=Get-MsalToken -ClientId 3c79c443-6a56-46d2-af88-625ae9075ad0 `
-Scopes https://graph.microsoft.com/Application.Read.All -RedirectUri http://localhost `
-UseEmbeddedWebView:$false
Connect-MgGraph -AccessToken $MsalToken.AccessToken
Get-MgApplication| Select-Object -Property Id,AppId,DisplayName -ExpandProperty RequiredResourceAccess|
Where-Object ResourceAppId -eq 00000002-0000-0ff1-ce00-000000000000|
Select-Object -Property Id,AppId,DisplayName|ConvertTo-Csv -Delimiter `,|
Out-File .\AzureADGraphApplications.csv

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.