Maarten Visser

← Microsoft Graph Customer Feedback

My feedback

  1. Restrict permissions to app-only Azure AD applications consuming Office 365 services on resource level

    219 votes
    Sign in
    (thinking…)
    Sign in with: Microsoft
    Forgot password?
    Create a password
    Signed in as (Sign out)
    Close
    Close

    We’ll send you updates on this idea

    25 comments  ·  Microsoft Graph Feature Requests » Identity and Access  ·  Flag idea as inappropriate…  ·  Admin →
    started  ·  Adminjackson.woods (Program Manager, Microsoft Graph) responded

    Work has started. We plan to build an experience where end users and administrators can pick a specific resource to grant consent to, such as a specific group or site. This will be programmable through Microsoft Graph API.

    Maarten Visser commented  · 

    The only way to stop Shadow IT (buying SaaS apps not landing in M365) is by having mechanisms for End Users (with no more then SP Site (Collection) Admin rights) to be able to install Apps from AppSource WITHOUT the need to go to Corporate IT. So no need for Tenent wide Consent, App Catalog approvals or other actions which require Azure AD or SharePoint Admin rights.

    We need this! And any other option to have a smooth flow for onboarding customers (SPfx and Team Tab apps)

    Maarten Visser supported this idea  · 

Feedback and Knowledge Base

(thinking…)