Commands › SharePoint Online

Disable-SPOTenantRestrictedAppAccessControl

SharePoint Online Microsoft.Online.SharePoint.PowerShell Disable-*

Turns off the tenant Application Restrictions enforcement switch while preserving the tenant deny list.

Quick start script

# Disable-SPOTenantRestrictedAppAccessControl — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-SPOService -Url https://$org-admin.sharepoint.com

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-SPOTenantRestrictedAppAccessControl
$before | Format-List

# 3. Make the change (dry run first)
Disable-SPOTenantRestrictedAppAccessControl  -WhatIf
Disable-SPOTenantRestrictedAppAccessControl

# 4. Verify and diff
$after = Get-SPOTenantRestrictedAppAccessControl
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Disable-SPOTenantRestrictedAppAccessControl [-WhatIf] [-Confirm] [<CommonParameters>]

Parameters (2)

Parameter	Type	Required	What it controls
-Confirm	SwitchParameter		Prompts you for confirmation before running the cmdlet. This cmdlet uses `ConfirmImpact.High`, so it prompts by default. Use `-Confirm:$false` to suppress the prompt in automation. Suppressing the prompt doesn't...
-WhatIf	SwitchParameter		Shows what would happen if the cmdlet runs. The cmdlet isn't run.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.