Created by Claude - please verify

App Proxy publishing - beta onPremisesPublishing per app. The API only accepts a read-write permission.

Required Microsoft Graph permissions

OnPremisesPublishingProfiles.ReadWrite.All (the only permission this API accepts) Application.Read.All — application permissions, granted to the app registration with admin consent.

Licence: Microsoft Entra ID P1 (Application Proxy).

Endpoints: GET /beta/onPremisesPublishingProfiles/applicationProxy/connectorGroups/{id}/applications · GET /beta/applications/{id}?$select=onPremisesPublishing ($batch)

There is no read-only permission for this API - the same one App Proxy Connectors uses.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

App Proxy Apps Published without Pre-authentication

Application Proxy publishes internal web apps to the internet. With pass-through pre-authentication, anyone on the internet reaches the internal app directly: no Entra sign-in, no MFA, no Conditional Access. App Proxy Connectors covers connector health; this report shows how each app is published.