Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsDelegatedPermissionGrant.Read.AllDelegatedAdmin consent
Read delegated permission grants
Allows the app to read delegated permission grants, on behalf of the signed in user.
- Permission ID
- a197cdc4-a8e8-4d49-9d35-4ca7c83887b4
- Catalog state
- Enabled
DelegatedPermissionGrant.ReadWrite.AllApplicationAdmin consent
Manage all delegated permission grants
Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), without a signed-in user.
- Permission ID
- 8e8e4742-1d95-4f68-9d56-6ee75648c72a
- Catalog state
- Enabled
DelegatedPermissionGrant.ReadWrite.AllDelegatedAdmin consent
Manage all delegated permission grants
Allows the app to manage permission grants for delegated permissions exposed by any API (including Microsoft Graph), on behalf of the signed in user.
- Permission ID
- 41ce6ca6-6826-4807-84f1-1c82854f7ee5
- Catalog state
- Enabled
Device.CommandDelegatedDelegated consent
Communicate with user devices
Allows the app to launch another app or communicate with another app on a user's device on behalf of the signed-in user.
- Permission ID
- bac3b9c2-b516-4ef4-bd3b-c2ef73d8d804
- Catalog state
- Enabled
Device.CreateFromOwnedTemplateDelegatedAdmin consent
Create a device from a device template owned by the signed-in user
Allows the app to create a device from a device template owned by the signed-in user.
- Permission ID
- edc92e89-a987-48a9-911a-a7b1967dd7b1
- Catalog state
- Enabled
Device.ReadDelegatedDelegated consent
Read user devices
Allows the app to read a user's list of devices on behalf of the signed-in user.
- Permission ID
- 11d4cd79-5ba5-460f-803f-e22c8ab85ccd
- Catalog state
- Enabled
Device.Read.AllApplicationAdmin consent
Read all devices
Allows the app to read your organization's devices' configuration information without a signed-in user.
- Permission ID
- 7438b122-aefc-4978-80ed-43db9fcc7715
- Catalog state
- Enabled
Device.Read.AllDelegatedAdmin consent
Read all devices
Allows the app to read your organization's devices' configuration information on behalf of the signed-in user.
- Permission ID
- 951183d1-1a61-466f-a6d1-1fde911bfd95
- Catalog state
- Enabled
Device.ReadWrite.AllApplicationAdmin consent
Read and write devices
Allows the app to read and write all device properties without a signed in user. Does not allow device creation, device deletion or update of device alternative security identifiers.
- Permission ID
- 1138cb37-bd11-4084-a2b7-9f71582aeddb
- Catalog state
- Enabled
DeviceLocalCredential.Read.AllApplicationAdmin consent
Read device local credential passwords
Allows the app to read device local credential properties including passwords, without a signed-in user.
- Permission ID
- 884b599e-4d48-43a5-ba94-15c414d00588
- Catalog state
- Enabled
DeviceLocalCredential.Read.AllDelegatedAdmin consent
Read device local credential passwords
Allows the app to read device local credential properties including passwords, on behalf of the signed-in user.
- Permission ID
- 280b3b69-0437-44b1-bc20-3b2fca1ee3e9
- Catalog state
- Enabled
DeviceLocalCredential.ReadBasic.AllApplicationAdmin consent
Read device local credential properties
Allows the app to read device local credential properties excluding passwords, without a signed-in user.
- Permission ID
- db51be59-e728-414b-b800-e0f010df1a79
- Catalog state
- Enabled
DeviceLocalCredential.ReadBasic.AllDelegatedAdmin consent
Read device local credential properties
Allows the app to read device local credential properties excluding passwords, on behalf of the signed-in user.
- Permission ID
- 9917900e-410b-4d15-846e-42a357488545
- Catalog state
- Enabled
DeviceManagementApps.Read.AllApplicationAdmin consent
Read Microsoft Intune apps
Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.
- Permission ID
- 7a6ee1e7-141e-4cec-ae74-d9db155731ff
- Catalog state
- Enabled
DeviceManagementApps.Read.AllDelegatedAdmin consent
Read Microsoft Intune apps
Allows the app to read the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.
- Permission ID
- 4edf5f54-4666-44af-9de9-0144fb4b6e8c
- Catalog state
- Enabled
DeviceManagementApps.ReadWrite.AllApplicationAdmin consent
Read and write Microsoft Intune apps
Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune, without a signed-in user.
- Permission ID
- 78145de6-330d-4800-a6ce-494ff2d33d07
- Catalog state
- Enabled
DeviceManagementApps.ReadWrite.AllDelegatedAdmin consent
Read and write Microsoft Intune apps
Allows the app to read and write the properties, group assignments and status of apps, app configurations and app protection policies managed by Microsoft Intune.
- Permission ID
- 7b3f05d5-f68c-4b8d-8c59-a2ecd12f24af
- Catalog state
- Enabled
DeviceManagementCloudCA.Read.AllApplicationAdmin consent
Read Microsoft Cloud PKI objects
Allows the app to read certification authority information without a signed-in user.
- Permission ID
- 315b6e8c-d92a-4691-919d-00ce76d1344a
- Catalog state
- Enabled
DeviceManagementCloudCA.Read.AllDelegatedAdmin consent
Read Microsoft Cloud PKI objects
Allows the app to read certification authority information on behalf of the signed-in user.
- Permission ID
- ac5c8443-d999-471f-9247-ce92cf5c5560
- Catalog state
- Enabled
DeviceManagementCloudCA.ReadWrite.AllApplicationAdmin consent
Read and write Microsoft Cloud PKI objects
Allows the app to read and write certification authority information without a signed-in user.
- Permission ID
- f15eb2ba-ef8a-4f70-991d-da5d045154e2
- Catalog state
- Enabled
DeviceManagementCloudCA.ReadWrite.AllDelegatedAdmin consent
Read and write Microsoft Cloud PKI objects
Allows the app to read and write certification authority information on behalf of the signed-in user.
- Permission ID
- 93028c58-65aa-48db-a706-1fe4ada325ec
- Catalog state
- Enabled
DeviceManagementConfiguration.Read.AllApplicationAdmin consent
Read Microsoft Intune device configuration and policies
Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.
- Permission ID
- dc377aa6-52d8-4e23-b271-2a7ae04cedf3
- Catalog state
- Enabled
DeviceManagementConfiguration.Read.AllDelegatedAdmin consent
Read Microsoft Intune Device Configuration and Policies
Allows the app to read properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.
- Permission ID
- f1493658-876a-4c87-8fa7-edb559b3476a
- Catalog state
- Enabled
DeviceManagementConfiguration.ReadWrite.AllApplicationAdmin consent
Read and write Microsoft Intune device configuration and policies
Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups, without a signed-in user.
- Permission ID
- 9241abd9-d0e6-425a-bd4f-47ba86e767a4
- Catalog state
- Enabled
DeviceManagementConfiguration.ReadWrite.AllDelegatedAdmin consent
Read and write Microsoft Intune Device Configuration and Policies
Allows the app to read and write properties of Microsoft Intune-managed device configuration and device compliance policies and their assignment to groups.
- Permission ID
- 0883f392-0a7a-443d-8c76-16a6d39c7b63
- Catalog state
- Enabled