How do I add TeamsAppInstallation.ReadSelectedForUser to my app registration?

Go to Azure Portal > App registrations > Your app > API permissions > Add permission > Microsoft Graph, then search for TeamsAppInstallation.ReadSelectedForUser and select it.

TeamsAppInstallation.ReadSelectedForUser Permission - Microsoft Graph API

Permission Details

Delegated Permission

Read user's selected installed Teams apps

Allows the app to read the selected Teams apps that are installed for the signed-in user. Does not give the ability to read application-specific settings.

Permission ID: fe2e4e1d-101f-4fb2-9cb1-9d6659db45d4

Properties

Property	Type	Description
`id`	`string`	The unique identifier for an entity. Read-only.
`teamsApp`	`object`	The app that is installed.
`consentedPermissionSet`	`object`	The set of resource-specific permissions consented to while installing or upgrading the teamsApp.
`scopeInfo`	`object`
`teamsAppDefinition`	`object`	The details of this version of the app.

JSON Representation

JSON representation

{
  "id": "String",
  "teamsApp": "{...}",
  "consentedPermissionSet": "{...}",
  "scopeInfo": "{...}",
  "teamsAppDefinition": "{...}"
}

Graph Methods

Delegated access App-only access

No API methods available for this version.

No PowerShell cmdlets found for this permission.

Code Examples

C# / .NET SDK

// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;

// Delegated permissions - interactive user sign-in
var scopes = new[] { "TeamsAppInstallation.ReadSelectedForUser" };
var options = new InteractiveBrowserCredentialOptions
{
    ClientId = "YOUR_CLIENT_ID",
    TenantId = "YOUR_TENANT_ID",
    RedirectUri = new Uri("http://localhost")
};
var credential = new InteractiveBrowserCredential(options);
var graphClient = new GraphServiceClient(credential, scopes);

// Example: GET /me
var result = await graphClient.Me.GetAsync();
Console.WriteLine($"User: {result?.DisplayName}");

JavaScript / TypeScript

// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";

const msalConfig = {
    auth: {
        clientId: "YOUR_CLIENT_ID",
        authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
    }
};

const pca = new PublicClientApplication(msalConfig);
await pca.initialize();

// Delegated: Login with required scope
const loginResponse = await pca.loginPopup({
    scopes: ["TeamsAppInstallation.ReadSelectedForUser"]
});

const authProvider = new AuthCodeMSALBrowserAuthenticationProvider(pca, {
    account: loginResponse.account,
    scopes: ["TeamsAppInstallation.ReadSelectedForUser"],
    interactionType: "popup"
});

const graphClient = Client.initWithMiddleware({ authProvider });

// Example: GET /me
const result = await graphClient.api("/me").get();
console.log(result);

PowerShell

# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser

# Delegated access - interactive sign-in
Connect-MgGraph -Scopes "TeamsAppInstallation.ReadSelectedForUser"

# Verify connection
Get-MgContext | Select-Object Account, TenantId, Scopes

# Example: GET /me
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/me"
$result | ConvertTo-Json -Depth 5


# Always disconnect when done
Disconnect-MgGraph

Python

# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio

# Delegated permissions - interactive browser sign-in
credential = InteractiveBrowserCredential(
    client_id="YOUR_CLIENT_ID",
    tenant_id="YOUR_TENANT_ID"
)
scopes = ["TeamsAppInstallation.ReadSelectedForUser"]
client = GraphServiceClient(credential, scopes)

async def get_data():
    # Example: GET /me
    result = await client.me.get()
    print(f"User: {result.display_name}")
    return result

asyncio.run(get_data())

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Delegated permissions and search for TeamsAppInstallation.ReadSelectedForUser

4

Grant Admin Consent

This permission requires admin consent. Grant consent in the Azure portal.