Feedback Edit

Hide an Enterprise application

  • Article
  • 2 minutes to read

Learn how to hide enterprise applications in Azure Active Directory. When an application is hidden, users still have permissions to the application.

Prerequisites

  • Application administrator privileges are required to hide an application from the My Apps portal and Microsoft 365 launcher.

  • Global administrator privileges are required to hide all Microsoft 365 applications.

Hide an application from the end user

Use the following steps to hide an application from My Apps portal and Microsoft 365 application launcher.

  1. Sign in to the Azure portal as the global administrator for your directory.
  2. Select Azure Active Directory.
  3. Select Enterprise applications.
  4. Under Application Type, select Enterprise Applications, if it isn't already selected.
  5. Search for the application you want to hide, and select the application.
  6. In the left navigation pane, select Properties.
  7. Select No for the Visible to users? question.
  8. Select Save.

Note

These instructions apply only to Enterprise applications.

To hide an application from the My Apps portal, you can manually add the HideApp tag to the service principal for the application. Run the following AzureAD PowerShell commands to set the application's Visible to Users? property to No.

Connect-AzureAD

$objectId = "<objectId>"
$servicePrincipal = Get-AzureADServicePrincipal -ObjectId $objectId
$tags = $servicePrincipal.tags
$tags += "HideApp"
Set-AzureADServicePrincipal -ObjectId $objectId -Tags $tags

To hide an application from the My Apps portal, you can manually add the HideApp tag to the service principal for the application. Run the following Microsoft Graph PowerShell commands to set the application's Visible to Users? property to No.

Connect-MgGraph

$servicePrincipal = Get-MgServicePrincipal -ServicePrincipalId $objectId
$tags = $servicePrincipal.tags
$tags += "HideApp"
Update-MgServicePrincipal -ServicePrincipalID  $objectId -Tags $tags

To hide an enterprise application using Graph Explorer, run the following queries.

  1. Get the application you want to hide.

    GET https://graph.microsoft.com/v1.0/servicePrincipals/5f214ccd-3f74-41d7-b683-9a6d845eea4d

  2. Update the application to hide it from users.

    PATCH https://graph.microsoft.com/v1.0/servicePrincipals/5f214ccd-3f74-41d7-b683-9a6d845eea4d/

    Supply the following request body.

    {
    "tags": [
    "HideApp"
    ]
}

    Warning

    If the application has other tags, you must include them in the request body. Otherwise, the query will overwrite them.

Hide Microsoft 365 applications from the My Apps portal

Use the following steps to hide all Microsoft 365 applications from the My Apps portal. The applications are still visible in the Office 365 portal.

  1. Sign in to the Azure portal as a global administrator for your directory.
  2. Select Azure Active Directory.
  3. Select Enterprise applications.
  4. Select User settings.
  5. For Users can only see Office 365 apps in the Office 365 portal, select Yes.
  6. Select Save.

Next steps