ESC
Type to search...

TeamsAppInstallation.ReadWriteSelectedForUser.All

Export JSON
Export CSV
Copy URL
Print
Application Read/Write All Resources

Allows the app to read, install, upgrade, and uninstall selected Teams apps for any user, without a signed-in user. Does not give the ability to read application-specific settings.

Delegated Access App-Only Access

Permission Details

Application Permission

Manage selected Teams apps installed for all users

Allows the app to read, install, upgrade, and uninstall selected Teams apps for any user, without a signed-in user. Does not give the ability to read application-specific settings.

Properties

Property Type Description
id string The unique identifier for an entity. Read-only.
teamsApp object The app that is installed.
consentedPermissionSet object The set of resource-specific permissions consented to while installing or upgrading the teamsApp.
scopeInfo object
teamsAppDefinition object The details of this version of the app.

JSON Representation

JSON representation
{
  "id": "String",
  "teamsApp": "{...}",
  "consentedPermissionSet": "{...}",
  "scopeInfo": "{...}",
  "teamsAppDefinition": "{...}"
}

Graph Methods

Delegated access App-only access
Methods
GET /users/{user-id | user-principal-name}/teamwork/installedApps
GET /users/{user-id | user-principal-name}/teamwork/installedApps/{app-installation-id}
GET /users/{user-id | user-principal-name}/teamwork/installedApps/{app-installation-id}/chat
POST /users/{user-id | user-principal-name}/teamwork/installedApps
POST /users/{user-id | user-principal-name}/teamwork/installedApps/{app-installation-id}/upgrade
DELETE /users/{user-id | user-principal-name}/teamwork/installedApps/{app-installation-id}
Methods
GET /users/{user-id | user-principal-name}/teamwork/installedApps
GET /users/{user-id | user-principal-name}/teamwork/installedApps/{app-installation-id}
GET /users/{user-id | user-principal-name}/teamwork/installedApps/{app-installation-id}/chat
POST /users/{user-id | user-principal-name}/teamwork/installedApps
POST /users/{user-id | user-principal-name}/teamwork/installedApps/{app-installation-id}/upgrade
DELETE /users/{user-id | user-principal-name}/teamwork/installedApps/{app-installation-id}

Code Examples

C# / .NET SDK
// Install: dotnet add package Microsoft.Graph
// Install: dotnet add package Azure.Identity
using Microsoft.Graph;
using Azure.Identity;



// Application permissions - daemon/service app
var tenantId = "YOUR_TENANT_ID";
var clientId = "YOUR_CLIENT_ID";
var clientSecret = "YOUR_CLIENT_SECRET";

var credential = new ClientSecretCredential(tenantId, clientId, clientSecret);
var graphClient = new GraphServiceClient(credential);

// Example: GET /users/{user-id}
var users = await graphClient.Users.GetAsync();
foreach (var user in users?.Value ?? [])
{
    Console.WriteLine($"User: {user.DisplayName}");
}
JavaScript / TypeScript
// npm install @azure/msal-browser @microsoft/microsoft-graph-client
import { PublicClientApplication } from "@azure/msal-browser";
import { Client } from "@microsoft/microsoft-graph-client";
import { AuthCodeMSALBrowserAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/authCodeMsalBrowser";

const msalConfig = {
    auth: {
        clientId: "YOUR_CLIENT_ID",
        authority: "https://login.microsoftonline.com/YOUR_TENANT_ID"
    }
};

const pca = new PublicClientApplication(msalConfig);
await pca.initialize();



// Application: Use client credentials (Node.js backend only)
// npm install @azure/identity @microsoft/microsoft-graph-client
import { ClientSecretCredential } from "@azure/identity";
import { TokenCredentialAuthenticationProvider } from 
    "@microsoft/microsoft-graph-client/authProviders/azureTokenCredentials";

const credential = new ClientSecretCredential(
    "YOUR_TENANT_ID",
    "YOUR_CLIENT_ID", 
    "YOUR_CLIENT_SECRET"
);

const authProvider = new TokenCredentialAuthenticationProvider(credential, {
    scopes: ["https://graph.microsoft.com/.default"]
});

const graphClient = Client.initWithMiddleware({ authProvider });
const result = await graphClient.api("/users").get();
console.log(result);
PowerShell
# Install Microsoft Graph PowerShell module
Install-Module Microsoft.Graph -Scope CurrentUser



# Application access with certificate
$params = @{
    ClientId = "YOUR_CLIENT_ID"
    TenantId = "YOUR_TENANT_ID"
    CertificateThumbprint = "YOUR_CERT_THUMBPRINT"
}
Connect-MgGraph @params

# Or with client secret (not recommended for production)
# Connect-MgGraph -ClientSecretCredential $credential

# Example: GET /users
$result = Invoke-MgGraphRequest -Method GET -Uri "https://graph.microsoft.com/v1.0/users"
$result | ConvertTo-Json -Depth 5

# Always disconnect when done
Disconnect-MgGraph
Python
# pip install msgraph-sdk azure-identity
from azure.identity import InteractiveBrowserCredential, ClientSecretCredential
from msgraph import GraphServiceClient
import asyncio



# Application permissions - client credentials
credential = ClientSecretCredential(
    tenant_id="YOUR_TENANT_ID",
    client_id="YOUR_CLIENT_ID",
    client_secret="YOUR_CLIENT_SECRET"
)
scopes = ["https://graph.microsoft.com/.default"]
client = GraphServiceClient(credential, scopes)

async def get_users():
    # Example: GET /users
    result = await client.users.get()
    for user in result.value:
        print(f"User: {user.display_name}")
    return result

asyncio.run(get_users())

App Registration

1

Navigate to Azure Portal

Go to App registrations in Microsoft Entra admin center

2

Add API Permission

Select your app → API permissions → Add a permission → Microsoft Graph

3

Select Permission Type

Choose Application permissions and search for TeamsAppInstallation.ReadWriteSelectedForUser.All

4

Grant Admin Consent

Application permissions always require admin consent. Click "Grant admin consent" in the Azure portal.