Recorded 26 Oct 2026 at 06:24 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
Microsoft Graph announcementMicrosoft Graph changelog
Identity and access (v1.0): 4 API change passages
Added the Domain-InternalFederation.Read.All application and delegated permission for reading internalDomainFederation resources.
Added the Domain-InternalFederation.ReadWrite.All application and delegated permission for reading and writing internalDomainFederation resources.
Added the Domain-InternalFederation.ReadWrite.All application and delegated permission for updating the domain resource. The delegated permission is the lesser-privileged higher-privileged alternative to *Directory.AccessAsUser.All* delegated permission while the application permission allows applications to update domains with their own identity without a signed-in user.
Resolved a known permissions issue for internalDomainFederation WRITE APIs that previously required consenting to the *Directory.AccessAsUser.All* permission for delegated scenarios. Apps can now use the new *Domain-InternalFederation.ReadWrite.All* permission as a lesser-privileged alternative.