app_management_policies

Creates, updates, deletes, gets or lists an app_management_policies resource.

Overview

Name	app_management_policies
Type	Resource
Id	entra_id.policies.app_management_policies

Fields

The following fields are returned by SELECT queries:

get

Retrieved navigation property

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
appliesTo	array	Collection of applications and service principals to which the policy is applied.
deletedDateTime	string (date-time)	Date and time when this object was deleted. Always null when the object hasn't been deleted. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)
description	string	Description for this policy. Required.
displayName	string	Display name for this policy. Required.
isEnabled	boolean	Denotes whether the policy is enabled.
restrictions		Restrictions that apply to an application or service principal object.

list

Retrieved collection

Name	Datatype	Description
id	string	The unique identifier for an entity. Read-only.
appliesTo	array	Collection of applications and service principals to which the policy is applied.
deletedDateTime	string (date-time)	Date and time when this object was deleted. Always null when the object hasn't been deleted. (pattern: ^[0-9]{4,}-(0[1-9]|1[012])-(0[1-9]|[12][0-9]|3[01])T([01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]([.][0-9]{1,12})?(Z|[+-][0-9][0-9]:[0-9][0-9])$)
description	string	Description for this policy. Required.
displayName	string	Display name for this policy. Required.
isEnabled	boolean	Denotes whether the policy is enabled.
restrictions		Restrictions that apply to an application or service principal object.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	app_management_policy_id		Read the properties of an appManagementPolicy object.
list	select			Retrieve a list of appManagementPolicy objects.
insert	insert			Create an appManagementPolicy object.
update	update	app_management_policy_id		Update an appManagementPolicy object.
delete	delete	app_management_policy_id	If-Match	Delete an appManagementPolicy object.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
app_management_policy_id	string	The unique identifier of appManagementPolicy
If-Match	string	ETag

SELECT examples

get

Read the properties of an appManagementPolicy object.

SELECT
id,
appliesTo,
deletedDateTime,
description,
displayName,
isEnabled,
restrictions
FROM entra_id.policies.app_management_policies
WHERE app_management_policy_id = '{{ app_management_policy_id }}' -- required
;

list

Retrieve a list of appManagementPolicy objects.

SELECT
id,
appliesTo,
deletedDateTime,
description,
displayName,
isEnabled,
restrictions
FROM entra_id.policies.app_management_policies
;

INSERT examples

insert

Create an appManagementPolicy object.

INSERT INTO entra_id.policies.app_management_policies (
id,
deletedDateTime,
description,
displayName,
isEnabled,
restrictions,
appliesTo
)
SELECT 
'{{ id }}',
'{{ deletedDateTime }}',
'{{ description }}',
'{{ displayName }}',
{{ isEnabled }},
'{{ restrictions }}',
'{{ appliesTo }}'
RETURNING
id,
appliesTo,
deletedDateTime,
description,
displayName,
isEnabled,
restrictions
;

Manifest

# Description fields are for documentation purposes
- name: app_management_policies
props:
  - name: id
    value: "{{ id }}"
    description: |
      The unique identifier for an entity. Read-only.
  - name: deletedDateTime
    value: "{{ deletedDateTime }}"
    description: |
      Date and time when this object was deleted. Always null when the object hasn't been deleted.
  - name: description
    value: "{{ description }}"
    description: |
      Description for this policy. Required.
  - name: displayName
    value: "{{ displayName }}"
    description: |
      Display name for this policy. Required.
  - name: isEnabled
    value: {{ isEnabled }}
    description: |
      Denotes whether the policy is enabled.
  - name: restrictions
    value: "{{ restrictions }}"
    description: |
      Restrictions that apply to an application or service principal object.
  - name: appliesTo
    description: |
      Collection of applications and service principals to which the policy is applied.
    value:
      - id: "{{ id }}"
        deletedDateTime: "{{ deletedDateTime }}"

UPDATE examples

update

Update an appManagementPolicy object.

UPDATE entra_id.policies.app_management_policies
SET 
id = '{{ id }}',
deletedDateTime = '{{ deletedDateTime }}',
description = '{{ description }}',
displayName = '{{ displayName }}',
isEnabled = {{ isEnabled }},
restrictions = '{{ restrictions }}',
appliesTo = '{{ appliesTo }}'
WHERE 
app_management_policy_id = '{{ app_management_policy_id }}' --required
RETURNING
id,
appliesTo,
deletedDateTime,
description,
displayName,
isEnabled,
restrictions;

DELETE examples

delete

Delete an appManagementPolicy object.

DELETE FROM entra_id.policies.app_management_policies
WHERE app_management_policy_id = '{{ app_management_policy_id }}' --required
AND If-Match = '{{ If-Match }}'
;