Commands › SharePoint Online

Get-SPOSiteRestrictedAppAccessControl

SharePoint Online Microsoft.Online.SharePoint.PowerShell Get-*

Returns the complete site-level Application Restrictions policy for a site, including enablement, active mode, and both the allow list and the deny list.

Quick start script

# Get-SPOSiteRestrictedAppAccessControl — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-SPOService -Url https://$org-admin.sharepoint.com

# 2. Run and inspect
Get-SPOSiteRestrictedAppAccessControl -Identity <String> | Format-List

# 3. Export for evidence / drift tracking
Get-SPOSiteRestrictedAppAccessControl | Export-Clixml .\SPOSiteRestrictedAppAccessControl-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-SPOSiteRestrictedAppAccessControl [-Identity] <String> [<CommonParameters>]

Parameters (1)

Parameter	Type	Required	What it controls
-Identity	String	yes	Specifies the site to read. You can specify either the site URL or the site ID.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.