Remove-EntraServicePrincipalDelegatedPermissionClassification

Module:

Microsoft.Entra.Applications Module v1.3

Remove delegated permission classification.

Remove-EntraServicePrincipalDelegatedPermissionClassification

 -ServicePrincipalId <String>
 -Id <String>
 [<CommonParameters>]

The Remove-EntraServicePrincipalDelegatedPermissionClassification cmdlet deletes the given delegated permission classification by Id from service principal.

Connect-Entra -Scopes 'Policy.ReadWrite.PermissionGrant'
$servicePrincipal = Get-EntraServicePrincipal -Filter "displayName eq 'Helpdesk Application'"
$permissionClassification = Get-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id | Where-Object {$_.PermissionName -eq 'Sites.Read.All'}
Remove-EntraServicePrincipalDelegatedPermissionClassification -ServicePrincipalId $servicePrincipal.Id -Id $permissionClassification.Id

This command deletes the delegated permission classification by Id from the service principal.

• -ServicePrincipalId parameter specifies the unique identifier of a service principal.
• -Id parameter specifies the unique identifier of a delegated permission classification object Id.

This cmdlet supports the common parameters: -Debug, -ErrorAction, -ErrorVariable, -InformationAction, -InformationVariable, -OutBuffer, -OutVariable, -PipelineVariable, -ProgressAction, -Verbose, -WarningAction, and -WarningVariable. For more information, see about_CommonParameters.