Skip to main content

cross_tenant_access_policy_default

Creates, updates, deletes, gets or lists a cross_tenant_access_policy_default resource.

Overview

Namecross_tenant_access_policy_default
TypeResource
Identra_id.policies.cross_tenant_access_policy_default

Fields

The following fields are returned by SELECT queries:

Retrieved navigation property

NameDatatypeDescription
idstringThe unique identifier for an entity. Read-only.
appServiceConnectInboundDefines your default configuration for inbound app service connect settings that control which applications can connect across tenant boundaries.
automaticUserConsentSettingsDetermines the default configuration for automatic user consent settings. The inboundAllowed and outboundAllowed properties are always false and can't be updated in the default configuration. Read-only.
b2bCollaborationInboundDefines your default configuration for users from other organizations accessing your resources via Microsoft Entra B2B collaboration.
b2bCollaborationOutboundDefines your default configuration for users in your organization going outbound to access resources in another organization via Microsoft Entra B2B collaboration.
b2bDirectConnectInboundDefines your default configuration for users from other organizations accessing your resources via Microsoft Entra B2B direct connect.
b2bDirectConnectOutboundDefines your default configuration for users in your organization going outbound to access resources in another organization via Microsoft Entra B2B direct connect.
inboundTrustDetermines the default configuration for trusting other Conditional Access claims from external Microsoft Entra organizations.
invitationRedemptionIdentityProviderConfigurationDefines the priority order based on which an identity provider is selected during invitation redemption for a guest user.
isServiceDefaultbooleanIf true, the default configuration is set to the system default configuration. If false, the default settings are customized.
m365CollaborationInboundDefines your default configuration for inbound Microsoft 365 collaboration settings that determine which users from other organizations can collaborate with your organization using Microsoft 365 apps.
m365CollaborationOutboundDefines your default configuration for outbound Microsoft 365 collaboration settings that determine which users in your organization can collaborate with other organizations using Microsoft 365 apps.
tenantRestrictionsDefines the default tenant restrictions configuration for users in your organization who access an external organization on your network or devices.

Methods

The following methods are available for this resource:

NameAccessible byRequired ParamsOptional ParamsDescription
getselectRead the default configuration of a cross-tenant access policy. This default configuration may be the service default assigned by Microsoft Entra ID (isServiceDefault is true) or may be customized in your tenant (isServiceDefault is false).
updateupdateUpdate the default configuration of a cross-tenant access policy.
deletedeleteIf-Match
reset_to_system_defaultexecReset any changes made to the default configuration in a cross-tenant access policy back to the system default.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

NameDatatypeDescription
If-MatchstringETag

SELECT examples

Read the default configuration of a cross-tenant access policy. This default configuration may be the service default assigned by Microsoft Entra ID (isServiceDefault is true) or may be customized in your tenant (isServiceDefault is false).

SELECT
id,
appServiceConnectInbound,
automaticUserConsentSettings,
b2bCollaborationInbound,
b2bCollaborationOutbound,
b2bDirectConnectInbound,
b2bDirectConnectOutbound,
inboundTrust,
invitationRedemptionIdentityProviderConfiguration,
isServiceDefault,
m365CollaborationInbound,
m365CollaborationOutbound,
tenantRestrictions
FROM entra_id.policies.cross_tenant_access_policy_default
;

UPDATE examples

Update the default configuration of a cross-tenant access policy.

UPDATE entra_id.policies.cross_tenant_access_policy_default
SET
id = '{{ id }}',
appServiceConnectInbound = '{{ appServiceConnectInbound }}',
automaticUserConsentSettings = '{{ automaticUserConsentSettings }}',
b2bCollaborationInbound = '{{ b2bCollaborationInbound }}',
b2bCollaborationOutbound = '{{ b2bCollaborationOutbound }}',
b2bDirectConnectInbound = '{{ b2bDirectConnectInbound }}',
b2bDirectConnectOutbound = '{{ b2bDirectConnectOutbound }}',
inboundTrust = '{{ inboundTrust }}',
invitationRedemptionIdentityProviderConfiguration = '{{ invitationRedemptionIdentityProviderConfiguration }}',
isServiceDefault = {{ isServiceDefault }},
m365CollaborationInbound = '{{ m365CollaborationInbound }}',
m365CollaborationOutbound = '{{ m365CollaborationOutbound }}',
tenantRestrictions = '{{ tenantRestrictions }}'
RETURNING
id,
appServiceConnectInbound,
automaticUserConsentSettings,
b2bCollaborationInbound,
b2bCollaborationOutbound,
b2bDirectConnectInbound,
b2bDirectConnectOutbound,
inboundTrust,
invitationRedemptionIdentityProviderConfiguration,
isServiceDefault,
m365CollaborationInbound,
m365CollaborationOutbound,
tenantRestrictions;

DELETE examples

No description available.

DELETE FROM entra_id.policies.cross_tenant_access_policy_default
WHERE If-Match = '{{ If-Match }}'
;

Lifecycle Methods

Reset any changes made to the default configuration in a cross-tenant access policy back to the system default.

EXEC entra_id.policies.cross_tenant_access_policy_default.reset_to_system_default

;