Forum Discussion
Report all active users in tenant and their installed integrated apps
Our security team has requested that we block the install of any Copilot apps until our AI policy is in place. Before we do this, I'd like to know what apps from Microsoft 365 admin center > Settings > Integrated apps > Available apps are currently installed by our users.
I don't see any way that the UI offers this capability, so I believe it will be PowerShell.
I did already run the following script, but it returns only 2 apps, which are apps we have deployed to our users. It's possible our 2600 users haven't installed anything else, but not probable.
Install-Module O365CentralizedAddInDeployment
Import-Module -Name O365CentralizedAddInDeployment
Connect-OrganizationAddInService
Get-OrganizationAddIn
If the above isn't possible, it would also be useful to find a script that would give me a list of users who have a given app (from 365 Integrated apps > Available apps) installed, such as CopilotForce or Microsoft Copilot Studio.
2 Replies
Afaik there is no way to do that currently. The portal uses an internal API, not exposed otherwise. The O365CentralizedAddInDeployment doesn't cover that.
Seems yours covered to organization-deployed add-ins only, please try below:
Install-Module -Name AzureAD Import-Module -Name AzureAD Connect-AzureAD Get-AzureADServicePrincipal -All $true | Where-Object {$_.Tags -contains "WindowsAzureActiveDirectoryIntegratedApp"} | Select-Object DisplayName, AppId, PublisherNameTo find a specific App, you can
$AppId = "<AppId_of_the_App>" Get-AzureADUserAppRoleAssignment -Filter "ResourceId eq '$AppId'" | Select-Object PrincipalDisplayName, PrincipalTypeExport
| Export-Csv -Path "C:\Temp\IntegratedAppsReport.csv" -NoTypeInformation
