New-CsTeamsAppPermissionPolicy

As an admin, you can use app permission policies to allow or block apps for your users.

# New-CsTeamsAppPermissionPolicy — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-MicrosoftTeams -CertificateThumbprint $thumb -ApplicationId $appId -TenantId $tenantId

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-CsTeamsAppPermissionPolicy
$before | Format-List

# 3. Make the change (dry run first)
New-CsTeamsAppPermissionPolicy  -WhatIf
New-CsTeamsAppPermissionPolicy

# 4. Verify and diff
$after = Get-CsTeamsAppPermissionPolicy
Compare-Object ($before | Out-String) ($after | Out-String)

New-CsTeamsAppPermissionPolicy [[-Identity] <String>]
 [-Confirm]
 [-DefaultCatalogApps <DefaultCatalogApp[]>]
 [-DefaultCatalogAppsType <String>]
 [-Description <String>]
 [-Force]
 [-GlobalCatalogApps <GlobalCatalogApp[]>]
 [-GlobalCatalogAppsType <String>]
 [-InMemory]
 [-PrivateCatalogApps <PrivateCatalogApp[]>]
 [-PrivateCatalogAppsType <String>]
 [-Tenant <Object>]
 [-WhatIf]
 [<CommonParameters>]

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.