Can I filter Teams users to see who has the Global (org-wide default) apps permissions policy?

%3CLINGO-SUB%20id%3D%22lingo-sub-2087676%22%20slang%3D%22en-US%22%3ECan%20I%20filter%20Teams%20users%20to%20see%20who%20has%20the%20Global%20(org-wide%20default)%20apps%20permissions%20policy%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2087676%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20the%20Teams%20admin%20area%20I%20can%20filter%20users%20to%20see%20who%20has%20one%20of%20our%20custom%20apps%20permissions%20policies%2C%20but%20can't%20find%20a%20way%20of%20filtering%20for%20those%20who%20have%20the%20Global%20(org-wide%20default)%20policy.%20Am%20I%20missing%20something%20glaringly%20obvious%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2087676%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdministrator%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EHow-to%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2088724%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20I%20filter%20Teams%20users%20to%20see%20who%20has%20the%20Global%20(org-wide%20default)%20apps%20permissions%20policy%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2088724%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F702032%22%20target%3D%22_blank%22%3E%40LynnProspect%3C%2FA%3E%26nbsp%3BHi%2C%20I've%20not%20been%20working%20that%20much%20with%20the%20app%20permission%20policies%2C%20and%20cannot%20verify%20in%20the%20TAC%20right%20now%20either%20(blocked%20being%20on%20parental%20leave)%2C%20but%20u%3CSPAN%3Esers%20in%20your%20organization%20will%20automatically%20get%20the%20global%20policy%20unless%20you%20create%20and%20assign%20a%20custom%20policy.%20So%20you%20can%20assume%20the%20ones%20not%20having%20a%20custom%20policy%20are%20using%20the%20global.%20Have%20you%20had%20a%20look%20at%20any%20PowerShell%20cmdlet%20(ex%20Get-CsTeamsAppPermissionPolicy)%20to%20see%20if%20they%20are%20of%20any%20use%20here%3F%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2088782%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20I%20filter%20Teams%20users%20to%20see%20who%20has%20the%20Global%20(org-wide%20default)%20apps%20permissions%20policy%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2088782%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F702032%22%20target%3D%22_blank%22%3E%40LynnProspect%3C%2FA%3E%26nbsp%3BGo%20to%20the%20list%20of%20users%2C%20press%20the%20filter%20funnel%2C%20you%20can%20then%20choose%20a%20specific%20policy%20to%20filter%20by.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2088785%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20I%20filter%20Teams%20users%20to%20see%20who%20has%20the%20Global%20(org-wide%20default)%20apps%20permissions%20policy%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2088785%22%20slang%3D%22en-US%22%3ESweet%20%3Athumbs_up%3A%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2088830%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20I%20filter%20Teams%20users%20to%20see%20who%20has%20the%20Global%20(org-wide%20default)%20apps%20permissions%20policy%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2088830%22%20slang%3D%22en-US%22%3EHey%2C%20I%20got%20the%20impression%20that's%20what%20she%20has%20done%2C%20but%20cannot%20see%20the%20global%20policy.%20But%20you%20can%20select%20it%3F%20It%E2%80%99s%20such%20a%20hassle%20not%20being%20able%20to%20verify%20myself.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2094874%22%20slang%3D%22en-US%22%3ERe%3A%20Can%20I%20filter%20Teams%20users%20to%20see%20who%20has%20the%20Global%20(org-wide%20default)%20apps%20permissions%20policy%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2094874%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F551905%22%20target%3D%22_blank%22%3E%40bec064%3C%2FA%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F178440%22%20target%3D%22_blank%22%3E%40Steven%20Collier%3C%2FA%3E%26nbsp%3BJust%20to%20confirm%3A%20we%20have%205%20custom%20policies%2C%20plus%20the%20global%20org-wide%20default.%20When%20I%20go%20to%20the%20list%20of%20users%20and%20try%20to%20filter%20by%20policy%2C%20the%20only%20selectable%20options%20are%20the%205%20custom%20policies.%20If%20powershell%20is%20the%20only%20way%20to%20get%20a%20list%20of%20users%20covered%20by%20the%20global%20default%2C%20that's%20frustrating.%20I%20don't%20use%20powershell%20-%20it's%20beyond%20my%20technical%20ability.%20I'm%20a%20project%20person%2C%20not%20a%20techie%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

In the Teams admin area I can filter users to see who has one of our custom apps permissions policies, but can't find a way of filtering for those who have the Global (org-wide default) policy. Am I missing something glaringly obvious?

5 Replies

@LynnProspect Hi, I've not been working that much with the app permission policies, and cannot verify in the TAC right now either (blocked being on parental leave), but users in your organization will automatically get the global policy unless you create and assign a custom policy. So you can assume the ones not having a custom policy are using the global. Have you had a look at any PowerShell cmdlet (ex Get-CsTeamsAppPermissionPolicy) to see if they are of any use here?

@LynnProspect Go to the list of users, press the filter funnel, you can then choose a specific policy to filter by.

Hey, I got the impression that's what she has done, but cannot see the global policy. But you can select it? It’s such a hassle not being able to verify myself.

@ChristianBergstrom@Steven Collier Just to confirm: we have 5 custom policies, plus the global org-wide default. When I go to the list of users and try to filter by policy, the only selectable options are the 5 custom policies. If powershell is the only way to get a list of users covered by the global default, that's frustrating. I don't use powershell - it's beyond my technical ability. I'm a project person, not a techie

@LynnProspect Hi, thanks for the update! That was my impression too, that you didn't see it when filtering. I'm sorry but as I mentioned I'm not able to access the TAC to verify either. Let hope Steven replies again.