Skip to content

New command: pa app permission remove #4655

@milanholemans

Description

@milanholemans

Usage

m365 pa app permission remove [options]

Description

Removes permissions to a Power Apps app

Options

Option Description
--appName <appName> The name (GUID) of the Microsoft Power App.
--userId [userId] The ID of the user. Specify either userId, userName, groupId, groupName, or tenant.
--userName [userName] User principal name of the user. Specify either userId, userName, groupId, groupName, or tenant.
--groupId [groupId] The ID of the group. Specify either userId, userName, groupId, groupName, or tenant.
--groupName [groupName] The name of the group. Specify either userId, userName, groupId, groupName, or tenant.
--tenant When specifying this, tenant permissions (everyone in the tenant) will be removed. Specify either userId, userName, groupId, groupName, or tenant.
--asAdmin Run the command as admin for apps you don't own.
-e, --environmentName [environmentName] The name of the environment. Specify only a value when running the command as admin.
--confirm Don't prompt for confirmation.

Examples

Remove permissions of a specific user for a specific app

m365 pa app permission remove --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --userName [email protected] 

Remove permissions of a specific security group for a specific app

m365 pa app permission remove --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --groupName Developers

Removes permissions as administrator from an app which you do not own

m365 pa app permission remove --environment Default-e535e809-c6a1-47b5-8951-d0898a64bf8a --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --userId 42a28ec6-972f-4fdd-b483-50ee4b237f91 --asAdmin

Unshare a Power Apps app with the entire tenant

m365 pa app permission remove --appName bc9f0a7e-53df-46af-b669-5888bb2f63d0 --tenant

Default properties

No response

Additional Info

Requested via our Discord community

API requests

Remove user/group permissions for your own app

POST https://api.powerapps.com/providers/Microsoft.PowerApps/apps/<App ID>/modifyPermissions?api-version=2022-11-01
{
    "delete": [
        {
            "id": "b58f305e-b409-4cf7-b1e8-335218ebc4a0" // User or group ID
        }
    ]
}

Remove user/group permissions for an app as admin

POST https://api.powerapps.com/providers/Microsoft.PowerApps/scopes/admin/environments/<Environment ID>/apps/<App ID>/modifyPermissions?api-version=2022-11-01
{
    "delete": [
        {
            "id": "b58f305e-b409-4cf7-b1e8-335218ebc4a0" // User or group ID
        }
    ]
}

Remove tenant permissions request has a slightly different body:

{
    "delete": [
        {
            "id": "tenant-b58f305e-b409-4cf7-b1e8-335218ebc4a0"
        }
    ]
}

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions