Commands › SharePoint Online

Get-SPOTenantRestrictedAppAccessControl

SharePoint Online Microsoft.Online.SharePoint.PowerShell Get-*

Returns the tenant-level Application Restrictions policy, including the tenant enforcement switch and the tenant-wide deny list of restricted application IDs.

Quick start script

# Get-SPOTenantRestrictedAppAccessControl — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-SPOService -Url https://$org-admin.sharepoint.com

# 2. Run and inspect
Get-SPOTenantRestrictedAppAccessControl | Format-List

# 3. Export for evidence / drift tracking
Get-SPOTenantRestrictedAppAccessControl | Export-Clixml .\SPOTenantRestrictedAppAccessControl-$(Get-Date -Format yyyyMMdd).xml

Syntax

Get-SPOTenantRestrictedAppAccessControl [<CommonParameters>]

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.