capabilities.work

Add an exclude condition to a consent policy

One step with Microsoft Entra ID (formerly Azure AD). We can help you get access.

Get something done

Add an exclude condition to a consent policy

with Microsoft Entra ID (formerly Azure AD) · Identity & Access Management

Use Microsoft Entra ID (formerly Azure AD): its Identity.SignIns Policies.permission Grant Policy API lets you add an exclude condition to a consent policy in a single step (POST /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/excludes). capabilities.work can help you get signed up and connected.

  • How do I exclude a specific client app from a permission grant policy?
  • Can I carve out high-risk permissions so consent to them isn't covered by a policy?
Say it to your AI assistant
  • Exclude client apps {client_app_ids} from permission grant policy {policy_id}.
  • Add an exclusion to policy {policy_id} for {permission_type} permissions classified {classification}.
For your developer

POST /policies/permissionGrantPolicies/{permissionGrantPolicy-id}/excludes in Identity.SignIns Policies.permission Grant Policy API. Full spec on APIs.io.