| title | Create approvedClientApp |
|---|---|
| description | Create a new approvedClientApp object. |
| author | mjsantani |
| ms.date | 11/11/2025 |
| ms.localizationpriority | medium |
| ms.subservice | entra-applications |
| doc_type | apiPageType |
Namespace: microsoft.graph
Create a new approvedClientApp object for the remoteDesktopSecurityConfiguration object on a service principal. You can configure a maximum of 20 approved client apps.
Choose the permission or permissions marked as least privileged for this API. Use a higher privileged permission or permissions only if your app requires it. For details about delegated and application permissions, see Permission types. To learn more about these permissions, see the permissions reference.
[!INCLUDE permissions-table]
[!INCLUDE rbac-remote-desktop-security-config-apis]
You can address the service principal using either its id or appId. id and appId are referred to as the Object ID and Application (Client) ID, respectively, in app registrations in the Microsoft Entra admin center.
POST /servicePrincipals/{id}/remoteDesktopSecurityConfiguration/approvedClientApps
POST /servicePrincipals(appId='{appId}')/remoteDesktopSecurityConfiguration/approvedClientApps| Name | Description |
|---|---|
| Authorization | Bearer {token}. Required. Learn more about authentication and authorization. |
| Content-Type | application/json. Required. |
In the request body, supply a JSON representation of the approvedClientApp object.
You can specify the following properties when creating an approvedClientApp.
| Property | Type | Description |
|---|---|---|
| displayName | String | Display name of the client application. Optional. |
If successful, this method returns a 201 Created response code and an approvedClientApp object in the response body.
The following example shows a request.
POST https://graph.microsoft.com/v1.0/servicePrincipals/00af5dfb-85da-4b41-a677-0c6b86dd34f8/remoteDesktopSecurityConfiguration/approvedClientApps
Content-Type: application/json
{
"@odata.type": "#microsoft.graph.approvedClientApp",
"displayName": "Client App 1"
}The following example shows the response.
Note: The response object shown here might be shortened for readability.
HTTP/1.1 201 Created
Content-Type: application/json
{
"@odata.type": "#microsoft.graph.approvedClientApp",
"id": "95bd8f3d-e166-c072-4e28-af935a6d237f",
"displayName": "Client App 1"
}