Forum Discussion
lbendlin
6 years agoSuper User
How to retrieve app permissions?
We instruct our developers not to give app access to the "Entire organization" but to specify individual email addresses and groups (PDLs). This is working fine for a while until that access list g...
- 6 years ago
Found it. Combine the CreateApp and UpdateApp tenant audit logs and use the OrgAppPermission of the latest CreationTime timestamp for each App ItemName. Also shows whodunnit.
lbendlin
6 years agoSuper User
Yeah, none of the Powershell cmdlets come anywhere close to the app object, or the permission settings, as far as I can tell.
lbendlin
6 years agoSuper User
Found it. Combine the CreateApp and UpdateApp tenant audit logs and use the OrgAppPermission of the latest CreationTime timestamp for each App ItemName. Also shows whodunnit.