Revoke an app you authorized in a work Microsoft account

A work or school app can request permission to use account data. If you granted it access for a one-time task, review whether it still needs that permission. The My Apps portal separates permissions you granted from those an administrator granted; removing the latter yourself may not be possible. Keep a note of the app name and what access it requested before making changes.

Check before you revoke​

1. Use your organization's trusted sign-in route to open the My Apps portal. Verify the account and tenant before opening an unfamiliar app. A phishing message can imitate a consent review.
2. Find the app and open its More menu, then Manage your application. Read the permissions at the top that you personally consented to, including what data the app can access.
3. For an app you no longer use, select Revoke Permissions for your own consent. Reopen the panel to confirm the change. Expect some app features or integrations to stop until permission is granted again.
4. If the permission appears in the administrator-consented section, contact your IT team with the app name and reason for concern. Do not treat the absence of a self-service Revoke button as proof that the app is safe.

If access looks suspicious​

Tell your security team promptly if you do not recognize a high-privilege app. Revoking a token does not undo data it may already have copied. Microsoft's My Apps instructions state that users can revoke their own consent but not administrator consent. Follow your organization's incident process rather than changing a shared business app without coordination.