Apply graph API online meeting creation via Application Access Policy to a security Groups

Question

We have an integration setup with Graph API that leverages OnlineMeetings.ReadWrite.All Application-level scope so that practitioners can schedule Teams meetings through our platform. we have concluded the the Application-level scope instead of delegated.

We have a requirement to allow that permission ( CsApplicationAccessPolicy) only to a security group rather setting up for individual users.

From research, I've found that the CsApplicationAccessPolicy can either be granted globally or to specific users for Teams. Is there a way to assign the policy to a group instead of specific users? Alternatively, is there a way to restrict the integration/Graph API to work for specified groups only?

Answer 1

The cmdlet supports group assignments via the -Group parameter, have you tried that? Alternatively, you can expand the membership of the Group and run it against each individual member:

Get-MgGroupMember -GroupId xxxxxxx | select Id | % { Grant-CsApplicationAccessPolicy -Identity $_.Id -PolicyName "policy name" }