Question

A user at Contoso installs a third-party productivity add-in and grants it permission to read their mailbox and calendar. Weeks later, the security team wants to review which delegated permissions were consented to for this application and revoke access organization-wide if needed. In which Microsoft Entra admin center location should they perform this review and revocation?

Accepted Answer

Under Enterprise applications, by selecting the app and reviewing its Permissions and Users and groups blades

Answer

Under App registrations, by editing the application manifest and removing the redirect URIs

Answer

Under Conditional Access, by creating a policy that blocks the app's client ID

Answer

Under Users, by deleting and recreating the affected user's account