No Ticket Needed

Appearance

5 min fix 8 min read Recently reviewedBeginner

By , IT support technician

Quick Answer

Go to myaccount.microsoft.com, sign in with your work email, click on App permissions in the left menu, and click Revoke permission next to any app you want to disconnect.

How to Manage App Permissions and Connected Apps in Microsoft 365 ​

Applies to: Microsoft 365 (MyApps Portal, My Account Portal)
Article Type: How-To
Last Updated: 2026-05-17

Summary ​

This article shows you how to review, manage, and revoke permissions that third-party and organizational apps have to your Microsoft 365 account. It covers the MyApps portal, the My Account permissions page, and how to recognize suspicious app access — helping you keep your account secure and your data private.

Prerequisites ​

  • A Microsoft 365 account (Business or Enterprise).
  • An active internet connection.
  • Access to a web browser (Edge, Chrome, or Firefox).
  • No admin rights are required for any step in this article.

Instructions ​

1. Understand App Permissions in Microsoft 365 ​

When you sign in to a third-party app or service using your Microsoft 365 account ("Sign in with Microsoft"), you grant that app specific permissions to access your data. Understanding what access you have granted is the first step to managing it.

Common permissions apps may request include:

  • Read your profile — The app can see your name, email address, and profile picture.
  • Read your email — The app can view your Outlook inbox.
  • Read your calendar — The app can view your calendar events.
  • Read and write your files — The app can access and modify files in OneDrive or SharePoint.
  • Send email on your behalf — The app can send emails that appear to come from you.

Note: Not all permissions are equal. An app that only reads your profile is low risk. An app that can send email on your behalf or modify your files requires more scrutiny.

2. Review Your Connected Apps in the MyApps Portal ​

The MyApps portal shows all applications you have access to and have consented to use.

  1. Open your browser and navigate to https://myapps.microsoft.com.
  2. Sign in with your Microsoft 365 account.
  3. The portal displays tiles for all apps available to you, including:
    • Organization apps — Apps deployed by your IT team (e.g., internal tools, HR systems).
    • Third-party apps — Apps you have personally consented to (e.g., Trello, Zoom, Miro).
  4. Click any app tile to launch it. The portal serves as a centralized dashboard for all your apps.

Verification: If you see an app you do not recognize, proceed to Method 3 to review its permissions.

3. Review and Revoke App Permissions in My Account ​

The My Account portal provides a detailed view of what each app can access and lets you revoke permissions.

  1. Open your browser and navigate to https://myaccount.microsoft.com.
  2. Sign in with your Microsoft 365 account.
  3. Click Permissions in the left navigation pane (you may need to scroll down or look under Privacy).
  4. A list of apps with consented permissions appears. For each app, you can see:
    • App name — The name of the application.
    • Publisher — Who created the app.
    • Permissions granted — What data the app can access (e.g., "Read your profile," "Access your calendar").
    • Date consented — When you granted access.
  5. Review each app. Ask yourself:
    • Do I still use this app?
    • Do the permissions seem reasonable for what the app does?
    • Do I recognize the publisher?
  6. To revoke an app's permissions, click the app name and then click Revoke or Remove permissions.
  7. Confirm the action when prompted.

Verification: After revoking, the app is removed from your permissions list. The next time the app tries to access your data, it is denied. If you open the app again, it prompts you to re-consent.

4. Review App Access from Outlook Settings ​

Some apps connect specifically to your Outlook mailbox. You can review and manage these from Outlook settings.

  1. Open Outlook on the web at https://outlook.office.com.
  2. Click the gear icon (⚙️) in the top-right corner to open Settings.
  3. Click Mail > Compose and reply, then scroll down — or search for add-ins in the Settings search bar.
  4. Click Manage add-ins or Manage integrations (depending on your Outlook version).
  5. A list of Outlook add-ins and connected apps appears.
  6. Toggle off or remove any add-in you do not use or do not recognize.

Note: Disabling an add-in from Outlook does not revoke its broader Microsoft 365 permissions. Use Method 3 (My Account) for full permission revocation.

5. Recognize Suspicious App Access ​

Not all app consent requests are legitimate. Some phishing attacks trick users into granting app access instead of stealing a password — this is called a consent phishing attack.

Watch for these warning signs when an app requests permissions:

  • Unfamiliar app name or publisher — You did not seek out this app.
  • Excessive permissions — A simple tool asks for email, calendar, and file access.
  • Consent request from a link in an email — Legitimate apps are usually accessed through your IT team or the Microsoft Store.
  • Urgent language — "Grant access now or lose your files" is a red flag.
  • Generic publisher name — Publishers named "App" or "Admin" with no company identity.

If you suspect you granted access to a malicious app:

  1. Immediately revoke the app's permissions using Method 3.
  2. Change your Microsoft 365 password (see the related article below).
  3. Check your sign-in activity for unusual access (see the related article below).
  4. Report the incident to your IT team.

6. Check Which Apps Your Organization Has Pre-Approved ​

Your IT team may pre-approve certain apps for your organization. These apps do not require individual consent.

  1. Navigate to https://myapps.microsoft.com.
  2. Click the three-dot menu (⋯) in the top-right corner and select Manage my apps or browse the All Apps section.
  3. Apps with an organization badge or "Added by your organization" label are IT-approved and pre-configured.
  4. These apps are safe to use — your IT team has reviewed their permissions and security posture.

Tip: If you need access to a third-party app that requires Microsoft 365 permissions, check with your IT team first. They may need to approve it at the tenant level before you can consent.

7. Best Practices for App Permission Hygiene ​

Follow these habits to keep your account secure over time.

  1. Audit quarterly: Set a calendar reminder to review your connected apps every 3 months using Method 3.
  2. Revoke unused apps: If you have not used an app in 90 days, revoke its permissions. You can always re-consent later if needed.
  3. Read consent prompts carefully: Before clicking Accept, read the list of permissions. If anything seems excessive, click Cancel and consult your IT team.
  4. Prefer organization-approved apps: Use apps from the MyApps portal whenever possible — these have been vetted by your IT team.
  5. Never consent from suspicious emails: If an email asks you to "grant access" or "connect your account," navigate to the app directly instead of clicking the email link.

Troubleshooting ​

WARNING

If you discover an app you did not authorize in your permissions list, treat it as a potential security incident. Revoke the app immediately, change your password, and notify your IT team. Consent phishing attacks can compromise your email, files, and calendar without requiring your password.

Symptom / ErrorPotential CauseSolution
"Permissions" page is not visible in My AccountFeature disabled by organization policyContact your IT team — they may manage app consent centrally. Ask them to review your consented apps.
Cannot revoke an organization-deployed appApp is managed by ITOrganization-deployed apps cannot be removed by individual users. If you believe the app needs removal, submit a ticket.
App still works after revoking permissionsCached session or delayed revocationClear your browser cache and cookies for the app. Sign out of the app manually. Revocation may take up to 1 hour to propagate.
Unknown app appears in permissions listConsent phishing or accidental consentRevoke the app immediately. Change your Microsoft 365 password. Check your Sign-in activity for suspicious logins. Report to IT.
Consent prompt keeps reappearing for the same appApp requires re-consent after updateIf the app is legitimate and IT-approved, click Accept. The app publisher may have updated its permissions. If unsure, contact your IT team.