Commands › Exchange Online

Set-PartnerApplication

Exchange Online ExchangeOnlineManagement Set-*

This cmdlet is functional only in on-premises Exchange. Use the Set-PartnerApplication cmdlet to configure partner application configurations in on-premises Exchange organizations.

Quick start script

# Set-PartnerApplication — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-PartnerApplication
$before | Format-List

# 3. Make the change (dry run first)
Set-PartnerApplication -Identity <PartnerApplicationIdParameter> -WhatIf
Set-PartnerApplication -Identity <PartnerApplicationIdParameter>

# 4. Verify and diff
$after = Get-PartnerApplication
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax — 3 parameter sets

ACSTrustApplication

Set-PartnerApplication [-Identity] <PartnerApplicationIdParameter>
 [-ApplicationIdentifier <String>]
 [-Realm <String>]
 [-AcceptSecurityIdentifierInformation <Boolean>]
 [-AccountType <SupportedAccountType>]
 [-ActAsPermissions <String[]>]
 [-AppOnlyPermissions <String[]>]
 [-Confirm]
 [-DomainController <Fqdn>]
 [-Enabled <Boolean>]
 [-IssuerIdentifier <String>]
 [-LinkedAccount <UserIdParameter>]
 [-Name <String>]
 [-WhatIf]
 [<CommonParameters>]

AuthMetadataUrl

Set-PartnerApplication [-Identity] <PartnerApplicationIdParameter>
 [-AuthMetadataUrl <String>]
 [-TrustAnySSLCertificate]
 [-AcceptSecurityIdentifierInformation <Boolean>]
 [-AccountType <SupportedAccountType>]
 [-ActAsPermissions <String[]>]
 [-AppOnlyPermissions <String[]>]
 [-Confirm]
 [-DomainController <Fqdn>]
 [-Enabled <Boolean>]
 [-IssuerIdentifier <String>]
 [-LinkedAccount <UserIdParameter>]
 [-Name <String>]
 [-WhatIf]
 [<CommonParameters>]

RefreshAuthMetadata

Set-PartnerApplication [-Identity] <PartnerApplicationIdParameter>
 [-RefreshAuthMetadata]
 [-AcceptSecurityIdentifierInformation <Boolean>]
 [-AccountType <SupportedAccountType>]
 [-ActAsPermissions <String[]>]
 [-AppOnlyPermissions <String[]>]
 [-Confirm]
 [-DomainController <Fqdn>]
 [-Enabled <Boolean>]
 [-IssuerIdentifier <String>]
 [-LinkedAccount <UserIdParameter>]
 [-Name <String>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (17)

Parameter	Type	Required	What it controls
-Identity	PartnerApplicationIdParameter	yes	The Identity parameter specifies the partner application you want to modify. You can use any value that uniquely identifies the partner application. For example:
-AcceptSecurityIdentifierInformation	Boolean		The AcceptSecurityIdentifierInformation parameter specifies whether Exchange should accept security identifiers (SIDs) from another trusted Active Directory forest for the partner application. By default, new partner...
-AccountType	SupportedAccountType		The AccountType parameter specifies the type of Microsoft account that's required for the partner application. Valid values are:
-ActAsPermissions	String[]		The ActAsPermissions parameter specifies the delegate permissions that are allowed for the partner application. You can specify multiple values separated by commas.
-ApplicationIdentifier	String		The ApplicationIdentifier parameter specifies a unique application identifier for the partner application that uses an authorization server.
-AppOnlyPermissions	String[]		This parameter is reserved for internal Microsoft use.
-AuthMetadataUrl	String		This parameter is available only in on-premises Exchange.
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-DomainController	Fqdn		This parameter is available only in on-premises Exchange.
-Enabled	Boolean		The Enabled parameter specifies whether the partner application is enabled. By default, new partner applications are enabled. Set the parameter to $false to create the application configuration in a disabled state.
-IssuerIdentifier	String		This parameter is reserved for internal Microsoft use.
-LinkedAccount	UserIdParameter		The LinkedAccount parameter specifies a linked Active Directory user account for the application. Exchange evaluates Role Based Access Control (RBAC) permissions for the linked account when authorizing a token used...
-Name	String		The Name parameter specifies a new name for the partner application.
-Realm	String		This parameter is available only in on-premises Exchange.
-RefreshAuthMetadata	SwitchParameter		This parameter is available only in on-premises Exchange.
-TrustAnySSLCertificate	SwitchParameter		This parameter is available only in on-premises Exchange.
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.