Thanks. I have updated the script in GitHub.

I ran this in interactive shell (shell.azure.com) and modified beside the output also.
https://github.com/12Knocksinna/Office365itpros/blob/4c00badd21ea10f1baa36ea0dc4a96eedfd1886c/ReportPermissionsApps.PS1#L133 (should be outputfile2 I think)

also I had app with no AdditionalProperties.createdDateTime so added a check for this:

if ($App.AdditionalProperties.createdDateTime) {
Write-Host “createdDateTime not null.”
[datetime]$AppCreationDate = $App.AdditionalProperties.createdDateTime
}
else{
Write-Host “createdDateTime is null. set to 1970”
[datetime]$AppCreationDate = ‘1970-01-01’
}

cheers

It’s PowerShell, so you can take the output file and slice and dice it in whatever way you want. In this case, you could sort by app to find all the assigned permissions and report that.

Microsoft Graph Delegated Organization.ReadWrite.All, User.ReadWrite ,Directory.ReadWrite.All

ABC Application openid User.Read, Directory.Read.All, Mail.Send Sites.FullControl.All Sites.Read.All

Thank you.