Application Access Policies constrain only the permissions assigned in Microsoft Entra ID, and Microsoft says Entra permissions can only be constrained using Application Access Policies.
Checked 2026-09-30
Application Access Policies constrain ONLY the permissions assigned in Microsoft Entra ID.
- Vendor
- Microsoft
- Product
- Exchange Online
- Subsystem
- application permissions
- Deployment
- multi-tenant
- Region
- not restricted
- Release range
- current as of 2026-09-30
- Checked
- 2026-09-30
Sources
- Role Based Access Control for Applications in Exchange Online — Microsoft · tier 2 current vendor documentation · FAQ > Why does my application still have access...; FAQ > How does RBAC for Applications work alongside Application Access Policies?
Cite this note
APA
WarmTransfer. (2026, September 30). Setting up Unity Connection single inbox with Microsoft 365: source note unity-connection-single-inbox-setup-aap-constrains-entra. WarmTransfer. https://warmtransfer.net/knowledge/claims/unity-connection-single-inbox-setup-aap-constrains-entra
BibTeX
@misc{warmtransfer-claim-unity-connection-single-inbox-setup-aap-constrains-entra,
title = {Setting up Unity Connection single inbox with Microsoft 365: source note unity-connection-single-inbox-setup-aap-constrains-entra},
author = {{WarmTransfer}},
year = {2026},
url = {https://warmtransfer.net/knowledge/claims/unity-connection-single-inbox-setup-aap-constrains-entra},
note = {Source note unity-connection-single-inbox-setup-aap-constrains-entra, checked 2026-09-30}
}