Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsFiles.ReadWriteDelegatedDelegated consent
Have full access to user files
Allows the app to read, create, update and delete the signed-in user's files.
- Permission ID
- 5c28f0bf-8a70-41f1-8ab2-9032436ddb65
- Catalog state
- Enabled
Files.ReadWrite.AllApplicationAdmin consent
Read and write files in all site collections
Allows the app to read, create, update and delete all files in all site collections without a signed in user.
- Permission ID
- 75359482-378d-4052-8f01-80520e7db3cd
- Catalog state
- Enabled
Files.ReadWrite.AllDelegatedDelegated consent
Have full access to all files user can access
Allows the app to read, create, update and delete all files the signed-in user can access.
- Permission ID
- 863451e7-0667-486c-a5d6-d135439485f0
- Catalog state
- Enabled
Files.ReadWrite.AppFolderApplicationAdmin consent
Have full access to the application's folder without a signed in user.
Allows the app to read, create, update and delete files in the application's folder without a signed in user.
- Permission ID
- b47b160b-1054-4efd-9ca0-e2f614696086
- Catalog state
- Enabled
Files.ReadWrite.AppFolderDelegatedDelegated consent
Have full access to the application's folder (preview)
(Preview) Allows the app to read, create, update and delete files in the application's folder.
- Permission ID
- 8019c312-3263-48e6-825e-2b833497195b
- Catalog state
- Enabled
Files.ReadWrite.SelectedDelegatedDelegated consent
Read and write files that the user selects
Allows the app temporary access to read and write specific files that the user selects through open with in the UX. The app has access for several hours after the user selects a file.
- Permission ID
- 17dde5bd-8c17-420f-a486-969730c1b827
- Catalog state
- Enabled
Files.SelectedOperations.SelectedApplicationAdmin consent
Access selected Files without a signed in user.
Allow the application to access a subset of files without a signed in user. The specific files and the permissions granted will be configured in SharePoint Online or OneDrive.
- Permission ID
- bd61925e-3bf4-4d62-bc0b-06b06c96d95c
- Catalog state
- Enabled
Files.SelectedOperations.SelectedDelegatedDelegated consent
Access selected Files, on behalf of the signed-in user
Allow the application to access files explicitly permissioned to the application on behalf of the signed in user. The specific files and the permissions granted will be configured in SharePoint Online or OneDrive.
- Permission ID
- ef2779dc-ef1b-4211-8310-8a0ac2450081
- Catalog state
- Enabled
FileStorageContainer.Manage.AllDelegatedAdmin consent
Manage all file storage containers
Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.
- Permission ID
- 527b6d64-cdf5-4b8b-b336-4aa0b8ca2ce5
- Catalog state
- Enabled
FileStorageContainer.SelectedApplicationAdmin consent
No display name in the catalog
Microsoft supplies no description in this catalog.
- Permission ID
- 40dc41bc-0f7e-42ff-89bd-d9516947e474
- Catalog state
- Enabled
FileStorageContainer.SelectedDelegatedAdmin consent
Access selected file storage containers
Allows the application to utilize the file storage container platform to manage containers on behalf of the signed in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type.
- Permission ID
- 085ca537-6565-41c2-aca7-db852babc212
- Catalog state
- Enabled
Financials.ReadWrite.AllDelegatedDelegated consent
Read and write financials data
Allows the app to read and write financials data on behalf of the signed-in user.
- Permission ID
- f534bf13-55d4-45a9-8f3c-c92fe64d6131
- Catalog state
- Enabled
Goals-Export.Read.AllDelegatedAdmin consent
Read all goals and export jobs that a user can access
Allows the app to read all goals and export jobs that the signed-in user can access.
- Permission ID
- 092211d9-ca1a-427b-813e-b79c7653fe71
- Catalog state
- Enabled
Goals-Export.ReadWrite.AllDelegatedAdmin consent
Have full access to all goals and export jobs a user can access
Allows the app to read goals, create and read export jobs that the signed-in user can access.
- Permission ID
- 2edeb9fd-4228-480c-a26d-2ed52011cf3d
- Catalog state
- Enabled
Group-Conversation.Read.AllApplicationAdmin consent
Read all group conversations
Allows the app to read conversations of the groups this app has access to without a signed-in user.
- Permission ID
- 4f0a8235-6f6f-4ec7-9500-34b452a4a0c3
- Catalog state
- Enabled
Group-Conversation.Read.AllDelegatedAdmin consent
Read group conversations
Allows the app to read group conversations that the signed-in user has access to.
- Permission ID
- c92fbbc2-50e0-4842-93ef-385c3293ea3d
- Catalog state
- Enabled
Group-Conversation.ReadWrite.AllApplicationAdmin consent
Read and write all group conversations
Allows the app to read and write conversations of the groups this app has access to without a signed-in user.
- Permission ID
- 6679c91b-820a-4900-ab47-e97b197a89c4
- Catalog state
- Enabled
Group-Conversation.ReadWrite.AllDelegatedAdmin consent
Read and write group conversations
Allows the app to read and write group conversations that the signed-in user has access to.
- Permission ID
- 302bcbb5-855a-4e49-ae20-94a331b0281e
- Catalog state
- Enabled
Group-OnPremisesSyncBehavior.ReadWrite.AllApplicationAdmin consent
Read and update the on-premises sync behavior of groups
Allows the app to update the on-premises sync behavior of all groups without a signed-in user.
- Permission ID
- 2d9bd318-b883-40be-9df7-63ec4fcdc424
- Catalog state
- Enabled
Group-OnPremisesSyncBehavior.ReadWrite.AllDelegatedAdmin consent
Read and update the on-premises sync behavior of groups
Allows the app to read and update the on-premises sync behavior of groups on behalf of the signed-in user.
- Permission ID
- 37e00479-5776-4659-aecf-4841ec5d590a
- Catalog state
- Enabled
Group.CreateApplicationAdmin consent
Create groups
Allows the app to create groups without a signed-in user.
- Permission ID
- bf7b1a76-6e77-406b-b258-bf5c7720e98f
- Catalog state
- Enabled
Group.Read.AllApplicationAdmin consent
Read all groups
Allows the app to read group properties and memberships, and read conversations for all groups, without a signed-in user.
- Permission ID
- 5b567255-7703-4780-807c-7be8301ae99b
- Catalog state
- Enabled
Group.Read.AllDelegatedAdmin consent
Read all groups
Allows the app to list groups, and to read their properties and all group memberships on behalf of the signed-in user. Also allows the app to read calendar, conversations, files, and other group content for all groups the signed-in user can access.
- Permission ID
- 5f8c59db-677d-491f-a6b8-5f174b11ec1d
- Catalog state
- Enabled
Group.ReadWrite.AllApplicationAdmin consent
Read and write all groups
Allows the app to create groups, read all group properties and memberships, update group properties and memberships, and delete groups. Also allows the app to read and write conversations. All of these operations can be performed by the app without a signed-in user.
- Permission ID
- 62a82d76-70ea-41e2-9197-370581804d09
- Catalog state
- Enabled
Group.ReadWrite.AllDelegatedAdmin consent
Read and write all groups
Allows the app to create groups and read all group properties and memberships on behalf of the signed-in user. Additionally allows group owners to manage their groups and allows group members to update group content.
- Permission ID
- 4e46008b-f24c-477d-8fff-7bb4ec7aafe0
- Catalog state
- Enabled