How can I revoke the access granted to web application to my organization's azure AD?

%3CLINGO-SUB%20id%3D%22lingo-sub-162211%22%20slang%3D%22en-US%22%3EHow%20can%20I%20revoke%20the%20access%20granted%20to%20web%20application%20to%20my%20organization's%20azure%20AD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-162211%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%3EI%20have%20Office%20365%20Developer%20account%20%26amp%3B%20tenant%20in%20windows%20azure%20to%20manage%20office%20365%20users.%20using%20consent%20framework%20%22prompt%3Dadmin_consent%22%2C%20I%20granted%20access%20rights%20to%20one%20of%20my%20web%20application%20already%20registered%20in%20Azure%20AD%20(which%20is%20managed%20by%20me)%20to%20use%20office%20365%20API%20services%2C%20After%20granting%20access%20using%20admin%20consent%2C%20all%20my%20Azure%20AD%20users%20are%20able%20to%20authenticate%20themselves%20against%20Azure%20AD.%20I%20am%20able%20to%20see%20the%20applications%20that%20I%20granted%20access%20using%26nbsp%3B%3C%2FSPAN%3E%3CA%20href%3D%22http%3A%2F%2Fmyapps.microsoft.com%2F%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%20target%3D%22_blank%22%3Ehttp%3A%2F%2Fmyapps.microsoft.com%3C%2FA%3E%3CSPAN%3E%26nbsp%3Bbut%20I%20am%20not%20able%20to%20revoke%20access%20granted%20for%20applications%20using%20this%20URL.%20How%20can%20I%20revoke%20the%20access%20granted%20to%20my%20or%20third-party%20application%20from%20my%20organization's%20Azure%20AD%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EI%20have%20installed%20an%20app%20from%20Office%20store%20and%20granted%20some%20permission%20and%20Would%20like%20to%20revoke%20permission%20to%20that%20app%20but%20not%20able%20to%20revoke%20access%20granted.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EReference%20%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fstackoverflow.com%2Fquestions%2F29179197%2Fhow-can-i-revoke-the-access-granted-to-web-application-to-my-organizations-azur%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fstackoverflow.com%2Fquestions%2F29179197%2Fhow-can-i-revoke-the-access-granted-to-web-application-to-my-organizations-azur%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-162211%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EApp%20level%20permission%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-332413%22%20slang%3D%22en-US%22%3ERe%3A%20How%20can%20I%20revoke%20the%20access%20granted%20to%20web%20application%20to%20my%20organization's%20azure%20AD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-332413%22%20slang%3D%22en-US%22%3E%3CP%3ESimply%20navigate%20to%20the%20Azure%20Portal%20and%20clic%20on%20your%20profile%20and%20Application%20menu%20item.%3C%2FP%3E%3CP%3E(or%20navigate%20to%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Faccount.activedirectory.windowsazure.com%2Fr%2F%23%2Fapplications%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Faccount.activedirectory.windowsazure.com%2Fr%2F%23%2Fapplications%3C%2FA%3E%20)%3C%2FP%3E%3CP%3EWhen%20you%20%22delete%22%20the%20application%2C%20it's%20just%20the%20%22consent%22%20that%20you%20delete.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20523px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F72232iEF39D84AB6693FAF%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22AppConsent1.png%22%20title%3D%22AppConsent1.png%22%20%2F%3E%3C%2FSPAN%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20699px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F72233i098FEF73E8F894C7%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22AppConsent2.png%22%20title%3D%22AppConsent2.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-162684%22%20slang%3D%22en-US%22%3ERe%3A%20How%20can%20I%20revoke%20the%20access%20granted%20to%20web%20application%20to%20my%20organization's%20azure%20AD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-162684%22%20slang%3D%22en-US%22%3E%3CP%3EI%20don't%20want%20to%20remove%20app%20but%20I%20would%20like%20to%20revoke%20access%20granted%20while%20using%20an%20app.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-162492%22%20slang%3D%22en-US%22%3ERe%3A%20How%20can%20I%20revoke%20the%20access%20granted%20to%20web%20application%20to%20my%20organization's%20azure%20AD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-162492%22%20slang%3D%22en-US%22%3E%3CP%3EYou%20should%20be%20able%20to%20revoke%20access%20via%20the%20Remove-AzureADOAuth2PermissionGrant%20cmdlets.%20Or%20remove%20the%20ServicePrincipal%20Object%20corresponding%20to%20the%20app%20altogether.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-162252%22%20slang%3D%22en-US%22%3ERe%3A%20How%20can%20I%20revoke%20the%20access%20granted%20to%20web%20application%20to%20my%20organization's%20azure%20AD%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-162252%22%20slang%3D%22en-US%22%3Eyou%20should%20be%20able%20to%20delete%20the%20app%20in%20Azure%20AD%20-%26gt%3B%20Applications%20%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmsdn.microsoft.com%2Fen-us%2Fskype%2Ftrusted-application-api%2Fdocs%2Ftenantadminconsent%23revoking-tenant-admin-consent%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmsdn.microsoft.com%2Fen-us%2Fskype%2Ftrusted-application-api%2Fdocs%2Ftenantadminconsent%23revoking-tenant-admin-consent%3C%2FA%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

I have Office 365 Developer account & tenant in windows azure to manage office 365 users. using consent framework "prompt=admin_consent", I granted access rights to one of my web application already registered in Azure AD (which is managed by me) to use office 365 API services, After granting access using admin consent, all my Azure AD users are able to authenticate themselves against Azure AD. I am able to see the applications that I granted access using http://myapps.microsoft.com but I am not able to revoke access granted for applications using this URL. How can I revoke the access granted to my or third-party application from my organization's Azure AD?

 

I have installed an app from Office store and granted some permission and Would like to revoke permission to that app but not able to revoke access granted.

 

Reference : https://stackoverflow.com/questions/29179197/how-can-i-revoke-the-access-granted-to-web-application-...

 

4 Replies
Highlighted

You should be able to revoke access via the Remove-AzureADOAuth2PermissionGrant cmdlets. Or remove the ServicePrincipal Object corresponding to the app altogether.

Highlighted

I don't want to remove app but I would like to revoke access granted while using an app.

Highlighted

Simply navigate to the Azure Portal and clic on your profile and Application menu item.

(or navigate to https://account.activedirectory.windowsazure.com/r/#/applications )

When you "delete" the application, it's just the "consent" that you delete.

 

AppConsent1.pngAppConsent2.png