Commands › Microsoft Teams

Set-CsTeamsAppPermissionPolicy

Microsoft Teams MicrosoftTeams Set-*

Cmdlet to set the app permission policy for Teams.

Quick start script

# Set-CsTeamsAppPermissionPolicy — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-MicrosoftTeams -CertificateThumbprint $thumb -ApplicationId $appId -TenantId $tenantId

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-CsTeamsAppPermissionPolicy
$before | Format-List

# 3. Make the change (dry run first)
Set-CsTeamsAppPermissionPolicy  -WhatIf
Set-CsTeamsAppPermissionPolicy

# 4. Verify and diff
$after = Get-CsTeamsAppPermissionPolicy
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax — 2 parameter sets

Identity (Default)

Set-CsTeamsAppPermissionPolicy [-Tenant <System.Guid>] [-DefaultCatalogApps <>] [-GlobalCatalogApps <>]
 [-PrivateCatalogApps <>] [-Description <String>] [-DefaultCatalogAppsType <String>]
 [-GlobalCatalogAppsType <String>] [-PrivateCatalogAppsType <String>] [[-Identity] <XdsIdentity>] [-Force]
 [-WhatIf] [-Confirm] [<CommonParameters>]

Instance

Set-CsTeamsAppPermissionPolicy [-Tenant <System.Guid>] [-DefaultCatalogApps <>] [-GlobalCatalogApps <>]
 [-PrivateCatalogApps <>] [-Description <String>] [-DefaultCatalogAppsType <String>]
 [-GlobalCatalogAppsType <String>] [-PrivateCatalogAppsType <String>] [-Instance <PSObject>] [-Force] [-WhatIf]
 [-Confirm] [<CommonParameters>]

Parameters (13)

ParameterTypeRequiredWhat it controls
-Confirm SwitchParameter Prompts you for confirmation before running the cmdlet.
-DefaultCatalogApps DefaultCatalogApp[] Choose which Teams apps published by Microsoft or its partners can be installed by your users.
-DefaultCatalogAppsType String Choose to allow or block the installation of Microsoft apps. Values that can be used: AllowedAppList, BlockedAppList.
-Description String Description of app setup permission policy.
-Force SwitchParameter Do not use.
-GlobalCatalogApps GlobalCatalogApp[] Choose which Teams apps published by a third party can be installed by your users.
-GlobalCatalogAppsType String Choose to allow or block the installation of third-party apps. Values that can be used: AllowedAppList, BlockedAppList.
-Identity XdsIdentity Name of App setup permission policy. If empty, all Identities will be used by default.
-Instance PSObject Do not use.
-PrivateCatalogApps PrivateCatalogApp[] Choose to allow or block the installation of custom apps.
-PrivateCatalogAppsType String Choose which custom apps can be installed by your users. Values that can be used: AllowedAppList, BlockedAppList.
-Tenant Guid Do not use.
-WhatIf SwitchParameter Shows what would happen if the cmdlet runs. The cmdlet is not run.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.