Can we create and grant CsApplicationAccessPolicy for a group?

Question

Like how we create for a users,
https://learn.microsoft.com/en-us/graph/cloud-communication-online-meeting-application-access-policy

Grant-CsApplicationAccessPolicy -PolicyName Policy_1 -Identity "aba02ce6-6d5d-473a-953d-23ad256dcffe"

Can we create and grant policy for a group ? Can we do like this
Grant-CsApplicationAccessPolicy -PolicyName Policy_1 -GroupId "{{GroupId}}"

Answer 1

Hi Ramyapriya Pasula,

Thank you for reaching out to Microsoft!

Unfortunately, the Grant-CsApplicationAccessPolicy cmdlet does not support directly assigning policies to groups. It is designed to assign policies to individual users only.

Graph API can work either on delegated permission or Application-level permissions. However, you can limit application permissions to a specific group by creating a New-ApplicationAccessPolicy. This method should satisfy your requirement.

For more information, please refer to the following documentation: Limiting application permissions to specific Exchange Online mailboxes

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote it. If you have any further questions about this answer, please click Comment.