Hiding Azure Enterprise App from users using az cli or PowerShell

Toggling "Visible to users" setting on portal adds / removes tag called HideApp.

Hide app:
~$ az ad sp update --id f5f6ecff-8661-4726-a83f-8e7db8aa068f --add tags "HideApp"

"Unhide" app:
~$ az ad sp show --id f5f6ecff-8661-4726-a83f-8e7db8aa068f --query tags
[
  "HideApp",
  "WindowsAzureActiveDirectoryIntegratedApp"
]

~$ az ad sp update --id f5f6ecff-8661-4726-a83f-8e7db8aa068f --remove tags 0
[
  "WindowsAzureActiveDirectoryIntegratedApp"
]

For PowerShell example see https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/hide-application-from-user-portal .