Merge pull request #208169 from omondiatieno/hide-app-updates

add microsoft graph PowerShell cmdlets and API queries

Author: v-regandowner

articles/active-directory/manage-apps/hide-application-from-user-portal.md

@@ -8,10 +8,12 @@ ms.service: active-directory
 ms.subservice: app-mgmt
 ms.workload: identity
 ms.topic: how-to
-ms.date: 07/21/2022
+ms.date: 08/17/2022
 ms.author: lenalepa
 ms.reviewer: ergreenl
 ms.collection: M365-identity-device-management
+zone_pivot_groups: enterprise-apps-all
+
 #customer intent: As an admin, I want to hide an enterprise application from user's experience so that it is not listed in the user's Active directory access portals or Microsoft 365 launchers
 ---
 
@@ -27,6 +29,8 @@ Learn how to hide enterprise applications in Azure Active Directory. When an app
 
 ## Hide an application from the end user
 
+:::zone pivot="portal"
+
 Use the following steps to hide an application from My Apps portal and Microsoft 365 application launcher.
 
 1. Sign in to the [Azure portal](https://portal.azure.com) as the global administrator for your directory.
@@ -38,12 +42,15 @@ Use the following steps to hide an application from My Apps portal and Microsoft
 1. Select **No** for the **Visible to users?** question.
 1. Select **Save**.
 
+:::zone-end
+
 > [!NOTE]
 > These instructions apply only to Enterprise applications.
 
-## Use Azure AD PowerShell to hide an application
+:::zone pivot="aad-powershell"
 
-To hide an application from the My Apps portal, you can manually add the HideApp tag to the service principal for the application. Run the following [AzureAD PowerShell](/powershell/module/azuread/#service_principals) commands to set the application's **Visible to Users?** property to **No**.
+
+To hide an application from the My Apps portal, you can manually add the HideApp tag to the service principal for the application. Run the following AzureAD PowerShell commands to set the application's **Visible to Users?** property to **No**.
 
 ```PowerShell
 Connect-AzureAD
@@ -54,6 +61,53 @@ $tags = $servicePrincipal.tags
 $tags += "HideApp"
 Set-AzureADServicePrincipal -ObjectId $objectId -Tags $tags
 ```
+:::zone-end
+
+:::zone pivot="ms-powershell"
+
+To hide an application from the My Apps portal, you can manually add the HideApp tag to the service principal for the application. Run the following Microsoft Graph PowerShell commands to set the application's **Visible to Users?** property to **No**.
+
+```PowerShell
+Connect-MgGraph
+
+$servicePrincipal = Get-MgServicePrincipal -ServicePrincipalId $objectId
+$tags = $servicePrincipal.tags
+$tags += "HideApp"
+Update-MgServicePrincipal -ServicePrincipalID  $objectId -Tags $tags
+```
+:::zone-end
+
+:::zone pivot="ms-graph"
+
+To hide an enterprise application using [Graph Explorer](https://developer.microsoft.com/graph/graph-explorer), run the following queries.
+
+1. Get the application you want to hide.
+
+   ```http
+   GET https://graph.microsoft.com/v1.0/servicePrincipals/5f214ccd-3f74-41d7-b683-9a6d845eea4d
+   ```
+1. Update the application to hide it from users.
+
+   ```http
+   PATCH https://graph.microsoft.com/v1.0/servicePrincipals/5f214ccd-3f74-41d7-b683-9a6d845eea4d/
+   ```
+
+    Supply the following request body.
+
+    ```json
+    {
+        "tags": [
+        "HideApp"
+        ]
+    }
+    ```
+   
+   >[!WARNING]
+   >If the application has other tags, you must include them in the request body. Otherwise, the query will overwrite them.
+
+:::zone-end
+
+:::zone pivot="portal"
 
 ## Hide Microsoft 365 applications from the My Apps portal
 
@@ -66,6 +120,7 @@ Use the following steps to hide all Microsoft 365 applications from the My Apps
 1. For **Users can only see Office 365 apps in the Office 365 portal**, select **Yes**.
 1. Select **Save**.
 
+:::zone-end
 ## Next steps
 
 - [Remove a user or group assignment from an enterprise app](./assign-user-or-group-access-portal.md)