Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 10:33 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
EduCurricula.ReadWriteDelegatedAdmin consent

Allows the app to read and write user's modules and resources on behalf of the signed-in user.

Permission ID
4793c53b-df34-44fd-8d26-d15c517732f5
Catalog state
Enabled
Microsoft permission reference
EduCurricula.ReadWrite.AllApplicationAdmin consent

Read and write all class modules and resources

Allows the app to read and write all modules and resources, without a signed-in user.

Permission ID
6a0c2318-d59d-4c7d-bf2e-5f3902dc2593
Catalog state
Enabled
Microsoft permission reference
EduReports-Reading.Read.AllApplicationAdmin consent

Read all tenant reading assignments submissions data

Allows the app to read all tenant users reading assignments submissions data without a signed-in user.

Permission ID
ad248c30-1919-40c8-b3d2-304481894e88
Catalog state
Enabled
Microsoft permission reference
EduReports-Reading.ReadAnonymous.AllApplicationAdmin consent

Read all tenant reading assignments submissions data

Allows the app to read all tenant users reading assignments submissions data (excludes student-identifying information) without a signed-in user.

Permission ID
040330d7-be7e-4130-b349-a6eb3a56e2f8
Catalog state
Enabled
Microsoft permission reference
EduReports-Reflect.Read.AllApplicationAdmin consent

Read all tenant reflect check-ins submissions data

Allows the app to read all tenant users reflect check-ins submissions data without a signed-in user.

Permission ID
c5debf73-bdc8-473d-bf07-f4074ad05f71
Catalog state
Enabled
Microsoft permission reference
EduReports-Reflect.ReadAnonymous.AllApplicationAdmin consent

Read all tenant reflect check-ins submissions data

Allows the app to read all tenant users reflect check-ins submissions data (excludes responder-identifying information) without a signed-in user.

Permission ID
f5d05dba-7ef0-46fc-b62c-a7282555f428
Catalog state
Enabled
Microsoft permission reference
EduRoster.ReadDelegatedAdmin consent

Read users' view of the roster

Allows the app to read the structure of schools and classes in an organization's roster and education-specific information about users to be read on behalf of the user.

Permission ID
a4389601-22d9-4096-ac18-36a927199112
Catalog state
Enabled
Microsoft permission reference
EduRoster.Read.AllApplicationAdmin consent

Read the organization's roster

Allows the app to read the structure of schools and classes in the organization's roster and education-specific information about all users to be read.

Permission ID
e0ac9e1b-cb65-4fc5-87c5-1a8bc181f648
Catalog state
Enabled
Microsoft permission reference
EduRoster.ReadBasicDelegatedAdmin consent

Read a limited subset of users' view of the roster

Allows the app to read a limited subset of the properties from the structure of schools and classes in an organization's roster and a limited subset of properties about users to be read on behalf of the user. Includes name, status, education role, email address and photo.

Permission ID
5d186531-d1bf-4f07-8cea-7c42119e1bd9
Catalog state
Enabled
Microsoft permission reference
EduRoster.ReadBasic.AllApplicationAdmin consent

Read a limited subset of the organization's roster

Allows the app to read a limited subset of properties from both the structure of schools and classes in the organization's roster and education-specific information about all users. Includes name, status, role, email address and photo.

Permission ID
0d412a8c-a06c-439f-b3ec-8abcf54d2f96
Catalog state
Enabled
Microsoft permission reference
EduRoster.ReadWriteDelegatedAdmin consent

Read and write users' view of the roster

Allows the app to read and write the structure of schools and classes in an organization's roster and education-specific information about users to be read and written on behalf of the user.

Permission ID
359e19a6-e3fa-4d7f-bcab-d28ec592b51e
Catalog state
Enabled
Microsoft permission reference
EduRoster.ReadWrite.AllApplicationAdmin consent

Read and write the organization's roster

Allows the app to read and write the structure of schools and classes in the organization's roster and education-specific information about all users to be read and written.

Permission ID
d1808e82-ce13-47af-ae0d-f9b254e6d58a
Catalog state
Enabled
Microsoft permission reference
emailDelegatedDelegated consent

View users' email address

Allows the app to read your users' primary email address

Permission ID
64a6cdd6-aab1-4aaf-94b8-3cc8405e90d0
Catalog state
Enabled
Microsoft permission reference
EntitlementManagement.Read.AllApplicationAdmin consent

Read all entitlement management resources

Allows the app to read access packages and related entitlement management resources without a signed-in user.

Permission ID
c74fd47d-ed3c-45c3-9a9e-b8676de685d2
Catalog state
Enabled
Microsoft permission reference
EntitlementManagement.Read.AllDelegatedAdmin consent

Read all entitlement management resources

Allows the app to read access packages and related entitlement management resources on behalf of the signed-in user.

Permission ID
5449aa12-1393-4ea2-a7c7-d0e06c1a56b2
Catalog state
Enabled
Microsoft permission reference
EntitlementManagement.ReadWrite.AllApplicationAdmin consent

Read and write all entitlement management resources

Allows the app to read and write access packages and related entitlement management resources without a signed-in user.

Permission ID
9acd699f-1e81-4958-b001-93b1d2506e19
Catalog state
Enabled
Microsoft permission reference
EntitlementManagement.ReadWrite.AllDelegatedAdmin consent

Read and write entitlement management resources

Allows the app to request access to and management of access packages and related entitlement management resources on behalf of the signed-in user.

Permission ID
ae7a573d-81d7-432b-ad44-4ed5c9d89038
Catalog state
Enabled
Microsoft permission reference
EntitlementMgmt-SubjectAccess.ReadWriteDelegatedDelegated consent

Read and write entitlement management resources related to self-service operations

Allows the app to manage self-service entitlement management resources on behalf of the signed-in user. This includes operations such as requesting access and approving access of others.

Permission ID
e9fdcbbb-8807-410f-b9ec-8d5468c7c2ac
Catalog state
Enabled
Microsoft permission reference
EntraBackup.Read.AllApplicationAdmin consent

Read backup jobs and snapshots

Allows the app to list all snapshots and jobs, and enumerate the changes of a specific preview or recovery job, without a signed-in user.

Permission ID
c16f30f0-3121-4976-bafe-66cb042f4f80
Catalog state
Enabled
Microsoft permission reference
EntraBackup.Read.AllDelegatedAdmin consent

Read backup jobs and snapshots

Allows the app to list all snapshots and jobs, and enumerate the changes of a specific preview or recovery job, on behalf of the signed-in user.

Permission ID
e3dbb094-f3f9-4625-bf6a-32e96856f34c
Catalog state
Enabled
Microsoft permission reference
EntraBackup.ReadWrite.PreviewDelegatedAdmin consent

Create preview jobs and read snapshots

Allows the app to list all snapshots and jobs, create preview jobs, and enumerate the changes of a specific preview job, on behalf of the signed-in user.

Permission ID
1266f280-49c3-4d32-91a5-bf4db4fbff48
Catalog state
Enabled
Microsoft permission reference
EntraBackup.ReadWrite.RecoveryDelegatedAdmin consent

Create recovery jobs and read snapshots

Allows the app to list all snapshots and jobs, create recovery jobs, and enumerate the changes of a specific recovery job, on behalf of the signed-in user.

Permission ID
6daf3aaf-bb77-4397-9dd6-e6d8b75727c2
Catalog state
Enabled
Microsoft permission reference
EventListener.Read.AllApplicationAdmin consent

Read all identity authentication event listeners

Allows the app to read your organization's authentication listeners, without a signed-in user.

Permission ID
b7f6385c-6ce6-4639-a480-e23c42ed9784
Catalog state
Enabled
Microsoft permission reference
EventListener.Read.AllDelegatedAdmin consent

Read all identity authentication event listeners

Allows the app to read your organization's authentication listeners, on behalf of the signed-in user.

Permission ID
f7dd3bed-5eec-48da-bc73-1c0ef50bc9a1
Catalog state
Enabled
Microsoft permission reference
EventListener.ReadWrite.AllApplicationAdmin consent

Read and write all identity authentication event listeners

Allows the app to read and write your organization's authentication listeners, without a signed-in user.

Permission ID
0edf5e9e-4ce8-468a-8432-d08631d18c43
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 10:33 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current