Skip to content

spo serviceprincipal grant revoke

Revokes the specified set of permissions granted to the service principal


m365 spo serviceprincipal grant revoke [options]


m365 spo sp grant revoke


-i, --id <id>
ObjectId of the permission grant to revoke.
-h, --help [help]
Output usage information. Optionally, specify which section of command's help you want to see. Allowed values are options, examples, remarks, response, full. Default is full.
--query [query]
JMESPath query string. See for more information and examples
-o, --output [output]
Output type. json,text,csv,md. Default json
Runs command with verbose logging
Runs command with debug logging



To use this command you must be a Global administrator.

The permission grant you want to revoke is denoted using its ObjectId. You can retrieve it using the spo serviceprincipal grant list command.


Revoke permission grant

m365 spo serviceprincipal grant revoke --id 50NAzUm3C0K9B6p8ORLtIsQccg4rMERGvFGRtBsk2fA


The command won't return a response on success.