Forum Discussion

PhilC42's avatar
PhilC42
Copper Contributor
Sep 08, 2020

Unable to delete Teams app permissions policy

We have an app permissions policy in Teams so we can test out some add-in apps, we are unable to delete the policy because it is impossible to delete without first going through each user is has been assigned to and setting them back to the org-wide default policy. Unhelpfully, Teams does not show you which users the policies have been assigned to.

 

Does anyone know how to show which users have been assigned an app permission policy?

 

I am certain that we used to be able to delete policies and any users they were assigned to would be automatically reverted back to the org-wide default policy.

 

Many thanks

  • JustSteve's avatar
    JustSteve
    Copper Contributor
    When I was applying a new App Setup Policy, I needed to know who was still using the old App Setup Policy. I already knew what policy to look for. If this is the case, here is how I did it. In the Teams Admin Center, go to Manage Users, on the right-hand side where you see the Export, Filter, and Edit column icons, click on Filter. Choose a filter from the drop-down list, such as the App permission policy or App Setup Policy, then choose the Operator such as = (equals) and then choose the Value from the drop-down to choose the policy you think they may be in. This will show the results.
    • Michael Davis's avatar
      Michael Davis
      Copper Contributor

      VasilMichev 

      Yes but...

      I have a similar case.  We have a custom policy that .. as far as I can tell... has no members.  But we can't delete it because, according to Teams, it does.    So we need to re-assign the policy to all the current members of the policy.

       

      Even this command requires that we know who to apply it to: https://docs.microsoft.com/en-us/powershell/module/teams/get-csuserpolicyassignment?view=teams-ps

       

      So is there a way to get a list of everyone assigned to policy X?

      • SteveB's avatar
        SteveB
        Brass Contributor

        PhilC42  & Michael Davis  I have used the following to get all users with a specific app permission policy assigned 

         

         

        Get-CsOnlineUser -Filter {TeamsAppPermissionPolicy -eq 'Policy Name Here'} | Select UserPrincipalName

         

         

        Then you can assign another policy for those users and delete the old one.

         

        Now if only someone could tell me how to remove the deleted user from the other policy I want to remove 🙂

Resources