Forum Discussion
lbendlin
6 years agoSuper User
How to retrieve app permissions?
We instruct our developers not to give app access to the "Entire organization" but to specify individual email addresses and groups (PDLs). This is working fine for a while until that access list g...
- 5 years ago
Found it. Combine the CreateApp and UpdateApp tenant audit logs and use the OrgAppPermission of the latest CreationTime timestamp for each App ItemName. Also shows whodunnit.
collinq
6 years agoSuper User
Hi lbendlin ,
There is no API that I am aware of that gives you this access. However, there is a github script that might work for you.
I would appreciate Kudos if my response was helpful. I would also appreciate it if you would Mark this As a Solution if it solved the problem. Thanks!
lbendlin
6 years agoSuper User
Yeah, none of the Powershell cmdlets come anywhere close to the app object, or the permission settings, as far as I can tell.
- lbendlin5 years agoSuper User
Found it. Combine the CreateApp and UpdateApp tenant audit logs and use the OrgAppPermission of the latest CreationTime timestamp for each App ItemName. Also shows whodunnit.