Microsoft 365 984

Get-TeamsAppPermissionPolicyReport

Reports every Teams app permission policy and which apps are blocked or allowed, so it is clear at a glance what third party apps users can actually install.

Get-TeamsAppPermissionPolicyReport.ps1

<#
.SYNOPSIS
    Reports Teams app permission policies and their allowed/blocked apps.

.DESCRIPTION
    Lists every Teams app permission policy along with global catalog,
    custom app and third party app settings, so it is clear what users
    are actually allowed to install without opening each policy in the
    Teams admin center.

.EXAMPLE
    .\Get-TeamsAppPermissionPolicyReport.ps1

.NOTES
    Requires the MicrosoftTeams module and an active Connect-MicrosoftTeams session.

.AUTHOR
    Shehryar Hassan
#>

$policies = Get-CsTeamsAppPermissionPolicy

$report = $policies | ForEach-Object {
    [pscustomobject]@{
        PolicyName        = $_.Identity
        GlobalCatalogApps = $_.GlobalCatalogAppsType
        ThirdPartyApps    = $_.DefaultCatalogAppsType
        CustomApps        = $_.PrivateCatalogAppsType
        BlockedAppCount   = $_.BlockedAppList.Count
    }
}

$report | Format-Table -AutoSize

Read it before you run it, and test in a safe tenant first.