Limit Application Permissions

In this step, we will now apply the restriction to the PlaceOS Room Booking group, restricting it to only see the calendars required for the purposes of room booking.

The application permissions policy may take up to 12 hours to become available after configuration, during this time PlaceOS will not be able to access room resources.

These steps are taken directly from the Microsoft Documentation: Limiting application permissions to specific exchange online mailboxes.

Prerequisites

• Exchange Resource Group

• Exchange Administrator Access

• Azure App Registration App ID

Procedure

1. From Exchange Online, or any other service with PowerShell connected to Exchange, open a new PowerShell Terminal.

2. Run the following command, replacing the arguments for AppID, PolicyScopeGroupID and Description. We will use the AppID and PolicyScopeGroupID from previous steps:

New-ApplicationAccessPolicy -AppId e7e4dbfc-046f-4074-9b3b-2ae8f144f59b -PolicyScopeGroupId [e-mail] -AccessRight RestrictAccess -Description "Restrict this app to members of distribution group PlaceOS Room Booking."

3. The application policy should now be applied, this can be tested using the `Test-ApplicationAccessPolicy` cmdlet:

Test-ApplicationAccessPolicy -Identity [e-mail] -AppId e7e4dbfc-046-4074-9b3b-2ae8f144f59b

4. If we test using a regular user, the result should be denied:

5. If we test using a room resource address, the result should be granted: