One of the following permissions is required to call this API. To learn more, including how to choose permissions, see Permissions.
Permission type
Permissions (from least to most privileged)
Delegated (work or school account)
Application.Read.All and Policy.Read.All, Application.Read.All and Policy.ReadWrite.ApplicationConfiguration
Delegated (personal Microsoft account)
Not supported.
Application
Application.Read.All and Policy.Read.All, Application.Read.All and Policy.ReadWrite.ApplicationConfiguration
To configure application authentication method policies, the calling user must be assigned at least the Global readerdirectory role.
HTTP request
GET /policies/appManagementPolicies/{id}/appliesTo
Optional query parameters
This method supports the $select, $filter, and $top OData query parameters to help customize the response. You can apply $filter on properties of application or servicePrincipal objects that support $filter. For example, the following query retrieves the appId and displayName of applications or service principals that are assigned the policy.
GET https://graph.microsoft.com/v1.0/policies/appManagementPolicies/{id}/appliesTo
// Code snippets are only available for the latest version. Current version is 5.x
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Policies.AppManagementPolicies["{appManagementPolicy-id}"].AppliesTo.GetAsync();
// THE CLI IS IN PREVIEW. NON-PRODUCTION USE ONLY
mgc policies app-management-policies applies-to list --app-management-policy-id {appManagementPolicy-id}
// Code snippets are only available for the latest version. Current version is 6.x
GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);
DirectoryObjectCollectionResponse result = graphClient.policies().appManagementPolicies().byAppManagementPolicyId("{appManagementPolicy-id}").appliesTo().get();
GET https://graph.microsoft.com/v1.0/policies/appManagementPolicies/{id}/appliesTo?$select=id,appId,displayName,createdDateTime
// Code snippets are only available for the latest version. Current version is 5.x
// To initialize your graphClient, see https://learn.microsoft.com/en-us/graph/sdks/create-client?from=snippets&tabs=csharp
var result = await graphClient.Policies.AppManagementPolicies["{appManagementPolicy-id}"].AppliesTo.GetAsync((requestConfiguration) =>
{
requestConfiguration.QueryParameters.Select = new string []{ "id","appId","displayName","createdDateTime" };
});
// THE CLI IS IN PREVIEW. NON-PRODUCTION USE ONLY
mgc policies app-management-policies applies-to list --app-management-policy-id {appManagementPolicy-id} --select "id,appId,displayName,createdDateTime"
// Code snippets are only available for the latest version. Current version is 6.x
GraphServiceClient graphClient = new GraphServiceClient(requestAdapter);
DirectoryObjectCollectionResponse result = graphClient.policies().appManagementPolicies().byAppManagementPolicyId("{appManagementPolicy-id}").appliesTo().get(requestConfiguration -> {
requestConfiguration.queryParameters.select = new String []{"id", "appId", "displayName", "createdDateTime"};
});
The following is an example of the response that returns id, appId, displayName and createdDateTime of applications and service principals where the policy is applied.
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.