Skip to content

microsoftapplicationdataaccesssettings-update.md

Latest commit

 

History

History
127 lines (95 loc) · 5.66 KB

microsoftapplicationdataaccesssettings-update.md

File metadata and controls

127 lines (95 loc) · 5.66 KB
title Update microsoftApplicationDataAccessSettings
description Update the properties of a microsoftApplicationDataAccessSettings object.
author ttomi
ms.localizationpriority medium
ms.subservice insights
doc_type apiPageType
ms.date 04/04/2024

Update microsoftApplicationDataAccessSettings

Namespace: microsoft.graph

[!INCLUDE beta-disclaimer]

Update the settings in a microsoftApplicationDataAccessSettings object that specify access from Microsoft applications to Microsoft 365 user data in an organization.

[!INCLUDE national-cloud-support]

Permissions

Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.

[!INCLUDE permissions-table]

HTTP request

PATCH /organization/{organizationId}/settings/microsoftApplicationDataAccess

Request headers

Name Description
Authorization Bearer {token}. Required. Learn more about authentication and authorization.
Content-Type application/json. Required.

Request body

[!INCLUDE table-intro]

Property Type Description
disabledForGroup String The ID of a Microsoft Entra security group whose members are allowed to access Microsoft 365 data using only Microsoft 365 apps, but not other Microsoft apps such as Edge.
This is only applicable if isEnabledForAllMicrosoftApplications is set to true.
isEnabledForAllMicrosoftApplications Boolean When set to true, all users in the organization can access in a Microsoft app any Microsoft 365 data that the user has been authorized to access. The Microsoft app can be a Microsoft 365 app (for example, Excel, Outlook) or non-Microsoft 365 app (for example, Edge). The default is true.
It is possible to disable this access for a subset of users in a Microsoft Entra security group, by specifying the group in the disabledForGroup property.
When set to false, users can access authorized Microsoft 365 data only in a Microsoft 365 app.

Response

If successful, this method returns a 200 OK response code and an updated microsoftApplicationDataAccessSettings object in the response body.

Examples

Request

The following example request shows how an admin updates the disabledForGroup privacy setting in order to prohibit users in a particular Microsoft Entra group from accessing Microsoft 365 data using Microsoft applications that are not part of Microsoft 365.

HTTP

PATCH https://graph.microsoft.com/beta/organization/{organizationId}/settings/microsoftApplicationDataAccess
Content-Type: application/json

{
  "disabledForGroup": "edbfe4fb-ec70-4300-928f-dbb2ae86c981"
}

C#

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Go

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Java

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

JavaScript

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

PHP

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

PowerShell

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Python

[!INCLUDE sample-code] [!INCLUDE sdk-documentation]

Response

Note: The response object shown here might be shortened for readability.

HTTP/1.1 200 OK
Content-Type: application/json

{
  "@odata.type": "#microsoft.graph.microsoftApplicationDataAccessSettings",
  "isEnabledForAllMicrosoftApplications": true,
  "disabledForGroup": "edbfe4fb-ec70-4300-928f-dbb2ae86c981"
}