如果设置为 true，则组织中的所有用户都可以在 Microsoft 应用中访问用户有权访问的任何 Microsoft 365 数据。 Microsoft 应用可以是 Microsoft 365 应用 (例如 Excel、Outlook) 或非 Microsoft 365 应用 (，例如 Edge) 。 默认值为 true。 可以通过在 disabledForGroup 属性中指定组，为Microsoft Entra安全组中的部分用户禁用此访问。 false设置为 时，用户只能在 Microsoft 365 应用中访问授权的 Microsoft 365 数据。
disabledForGroup
String
Microsoft Entra安全组的 ID，该安全组的成员只能使用 Microsoft 365 应用访问 Microsoft 365 数据，而不能使用其他 Microsoft 应用（如 Edge）。 仅当 isEnabledForAllMicrosoftApplications 设置为 true时，这才适用。
// Code snippets are only available for the latest version. Current version is 5.x
// Dependencies
using Microsoft.Graph.Beta.Models;
var requestBody = new MicrosoftApplicationDataAccessSettings
{
DisabledForGroup = "edbfe4fb-ec70-4300-928f-dbb2ae86c981",
};
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Organization["{organization-id}"].Settings.MicrosoftApplicationDataAccess.PatchAsync(requestBody);
// THE CLI IS IN PREVIEW. NON-PRODUCTION USE ONLY
mgc-beta organization settings microsoft-application-data-access patch --organization-id {organization-id} --body '{\
"disabledForGroup": "edbfe4fb-ec70-4300-928f-dbb2ae86c981"\
}\
'
// Code snippets are only available for the latest version. Current version is 6.x
GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);
MicrosoftApplicationDataAccessSettings microsoftApplicationDataAccessSettings = new MicrosoftApplicationDataAccessSettings();
microsoftApplicationDataAccessSettings.setDisabledForGroup("edbfe4fb-ec70-4300-928f-dbb2ae86c981");
MicrosoftApplicationDataAccessSettings result = graphClient.organization().byOrganizationId("{organization-id}").settings().microsoftApplicationDataAccess().patch(microsoftApplicationDataAccessSettings);
<?php
use Microsoft\Graph\GraphServiceClient;
use Microsoft\Graph\Generated\Models\MicrosoftApplicationDataAccessSettings;
$graphServiceClient = new GraphServiceClient($tokenRequestContext, $scopes);
$requestBody = new MicrosoftApplicationDataAccessSettings();
$requestBody->setDisabledForGroup('edbfe4fb-ec70-4300-928f-dbb2ae86c981');
$result = $graphServiceClient->organization()->byOrganizationId('organization-id')->settings()->microsoftApplicationDataAccess()->patch($requestBody)->wait();