Commands › SharePoint Online

Set-SPOApplicationPermission

SharePoint Online Microsoft.Online.SharePoint.PowerShell Set-*

Manages permissions for a guest application to access a SharePoint Embedded application.

Quick start script

# Set-SPOApplicationPermission — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-SPOService -Url https://$org-admin.sharepoint.com

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-SPOApplicationPermission
$before | Format-List

# 3. Make the change
Set-SPOApplicationPermission -ApplicationId <Guid> -OwningApplicationId <Guid> -PermissionAppOnly <String[]>

# 4. Verify and diff
$after = Get-SPOApplicationPermission
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Set-SPOApplicationPermission [-OwningApplicationId] <Guid> [-GuestApplicationId] <Guid>
 [-PermissionAppOnly] <String[]> [[-PermissionDelegated] <String[]>] [<CommonParameters>]

Parameters (4)

Parameter	Type	Required	What it controls
-ApplicationId	Guid	yes	Use this parameter to specify the guest application ID. A guest application is any application within the tenant's enterprise applications.
-OwningApplicationId	Guid	yes	Use this parameter to specify the Owning Application where guest application access is granted.
-PermissionAppOnly	String[]	yes	Use this parameter to specify the app-only permissions of the guest application.
-PermissionDelegated	String[]		This parameter specifies delegated permissions which are not supported for guest applications at this time.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.