Forum Discussion
lbendlin
Super User
Super UserHow to retrieve app permissions?
We instruct our developers not to give app access to the "Entire organization" but to specify individual email addresses and groups (PDLs). This is working fine for a while until that access list g...
Found it. Combine the CreateApp and UpdateApp tenant audit logs and use the OrgAppPermission of the latest CreationTime timestamp for each App ItemName. Also shows whodunnit.
lbendlinSuper User
Super UserYeah, none of the Powershell cmdlets come anywhere close to the app object, or the permission settings, as far as I can tell.
lbendlinSuper User
Super UserFound it. Combine the CreateApp and UpdateApp tenant audit logs and use the OrgAppPermission of the latest CreationTime timestamp for each App ItemName. Also shows whodunnit.