TeamsAppInstallation.ReadWriteSelectedForTeam
Allows the app to read, install, upgrade, and uninstall selected Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings.
In short
TeamsAppInstallation.ReadWriteSelectedForTeam is a delegated permission in the Microsoft Graph API, grouped under the TeamsAppInstallation category. Allows the app to read, install, upgrade, and uninstall selected Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings. It grants read and write access to resources. This delegated permission requires admin consent.
Permission Details
Manage selected Teams apps installed in teams
Allows the app to read, install, upgrade, and uninstall selected Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings.
9131c833-9a49-4c54-b38f-615ecfc4fc69
Properties
Properties is shown from stable Microsoft Graph v1.0 metadata.
| Property | Type | Description |
|---|---|---|
consentedPermissionSet |
teamsAppPermissionSet |
The set of resource-specific permissions consented to while installing or upgrading the teamsApp. |
id |
string |
A unique ID (not the Teams app ID). |
teamsApp |
object |
The app that is installed. |
teamsAppDefinition |
object |
The details of this version of the app. |
JSON Representation
JSON representation is shown from stable Microsoft Graph v1.0 metadata.
{
"consentedPermissionSet": "#microsoft.graph.teamsAppPermissionSet",
"id": "string"
}
Relationships
Relationships is shown from stable Microsoft Graph v1.0 metadata.
| Relationship | Type | Description |
|---|---|---|
teamsApp |
teamsApp |
The app that is installed. |
teamsAppDefinition |
teamsAppDefinition |
The details of this version of the app. |
Graph Methods
Microsoft Graph v1.0 endpoints are not available from refreshed Microsoft Learn or Microsoft Graph OpenAPI metadata for this permission.
No API methods available for this version.
Microsoft Graph beta endpoints are not available from refreshed Microsoft Learn or Microsoft Graph OpenAPI metadata for this permission.
No API methods available for this version.
Microsoft Graph PowerShell v1.0 commands are not available from refreshed Microsoft Learn PowerShell snippets for this permission.
No deterministic PowerShell command map is available for this permission.
Browse PowerShell docsMicrosoft Graph PowerShell beta commands are not available from refreshed Microsoft Learn PowerShell snippets for this permission.
No deterministic PowerShell command map is available for this permission.
Browse PowerShell docsCode Examples
using Azure.Identity;
using Microsoft.Graph;
var scopes = new[] { "TeamsAppInstallation.ReadWriteSelectedForTeam" };
var credential = new InteractiveBrowserCredential(
new InteractiveBrowserCredentialOptions
{
ClientId = "YOUR_CLIENT_ID",
TenantId = "YOUR_TENANT_ID",
RedirectUri = new Uri("http://localhost")
});
var graphClient = new GraphServiceClient(credential, scopes);
var response = await graphClient
.WithUrl("https://graph.microsoft.com/v1.0/teamsappinstallation")
.GetAsync();
import { Client } from "@microsoft/microsoft-graph-client";
import { InteractiveBrowserCredential } from "@azure/identity";
const credential = new InteractiveBrowserCredential({
clientId: "YOUR_CLIENT_ID",
tenantId: "YOUR_TENANT_ID",
redirectUri: "http://localhost"
});
const token = await credential.getToken(["TeamsAppInstallation.ReadWriteSelectedForTeam"]);
const client = Client.init({
authProvider: (done) => done(null, token.token)
});
const response = await client.api("/teamsappinstallation").get();
Connect-MgGraph -Scopes "TeamsAppInstallation.ReadWriteSelectedForTeam"
Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/teamsappinstallation"
from azure.identity import InteractiveBrowserCredential
import requests
credential = InteractiveBrowserCredential(
client_id="YOUR_CLIENT_ID",
tenant_id="YOUR_TENANT_ID"
)
token = credential.get_token("TeamsAppInstallation.ReadWriteSelectedForTeam")
response = requests.get(
"https://graph.microsoft.com/v1.0/teamsappinstallation",
headers={"Authorization": f"Bearer {token.token}"}
)
print(response.json())
App Registration
Navigate to Azure Portal
Go to App registrations in Microsoft Entra admin center
Add API Permission
Select your app → API permissions → Add a permission → Microsoft Graph
Select Permission Type
Choose Delegated permissions and search for TeamsAppInstallation.ReadWriteSelectedForTeam
Grant Admin Consent
This delegated permission requires admin consent.
Frequently asked questions
What is the TeamsAppInstallation.ReadWriteSelectedForTeam Microsoft Graph permission?
TeamsAppInstallation.ReadWriteSelectedForTeam is a delegated permission in the Microsoft Graph API, grouped under the TeamsAppInstallation category. Allows the app to read, install, upgrade, and uninstall selected Teams apps in teams the signed-in user can access. Does not give the ability to read application-specific settings. It grants read and write access to resources. This delegated permission requires admin consent. It is mapped to the Microsoft Graph teamsappinstallation resource type.
Is TeamsAppInstallation.ReadWriteSelectedForTeam an application or a delegated permission?
TeamsAppInstallation.ReadWriteSelectedForTeam is a delegated permission only. It grants access on behalf of a signed-in user and cannot be used for app-only access.
Does TeamsAppInstallation.ReadWriteSelectedForTeam require admin consent?
This delegated permission requires admin consent.
What is the permission ID (GUID) for TeamsAppInstallation.ReadWriteSelectedForTeam?
For TeamsAppInstallation.ReadWriteSelectedForTeam, the delegated (OAuth2 scope) ID is 9131c833-9a49-4c54-b38f-615ecfc4fc69. These are the real Microsoft Graph identifiers and can be used directly in an app registration manifest.