Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 11:34 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
Files.ReadWriteDelegatedDelegated consent

Have full access to user files

Allows the app to read, create, update and delete the signed-in user's files.

Permission ID
5c28f0bf-8a70-41f1-8ab2-9032436ddb65
Catalog state
Enabled
Microsoft permission reference
Files.ReadWrite.AllApplicationAdmin consent

Read and write files in all site collections

Allows the app to read, create, update and delete all files in all site collections without a signed in user.

Permission ID
75359482-378d-4052-8f01-80520e7db3cd
Catalog state
Enabled
Microsoft permission reference
Files.ReadWrite.AllDelegatedDelegated consent

Have full access to all files user can access

Allows the app to read, create, update and delete all files the signed-in user can access.

Permission ID
863451e7-0667-486c-a5d6-d135439485f0
Catalog state
Enabled
Microsoft permission reference
Files.ReadWrite.AppFolderApplicationAdmin consent

Have full access to the application's folder without a signed in user.

Allows the app to read, create, update and delete files in the application's folder without a signed in user.

Permission ID
b47b160b-1054-4efd-9ca0-e2f614696086
Catalog state
Enabled
Microsoft permission reference
Files.ReadWrite.AppFolderDelegatedDelegated consent

Have full access to the application's folder (preview)

(Preview) Allows the app to read, create, update and delete files in the application's folder.

Permission ID
8019c312-3263-48e6-825e-2b833497195b
Catalog state
Enabled
Microsoft permission reference
Files.ReadWrite.SelectedDelegatedDelegated consent

Read and write files that the user selects

Allows the app temporary access to read and write specific files that the user selects through open with in the UX. The app has access for several hours after the user selects a file.

Permission ID
17dde5bd-8c17-420f-a486-969730c1b827
Catalog state
Enabled
Microsoft permission reference
Files.SelectedOperations.SelectedApplicationAdmin consent

Access selected Files without a signed in user.

Allow the application to access a subset of files without a signed in user. The specific files and the permissions granted will be configured in SharePoint Online or OneDrive.

Permission ID
bd61925e-3bf4-4d62-bc0b-06b06c96d95c
Catalog state
Enabled
Microsoft permission reference
Files.SelectedOperations.SelectedDelegatedDelegated consent

Access selected Files, on behalf of the signed-in user

Allow the application to access files explicitly permissioned to the application on behalf of the signed in user. The specific files and the permissions granted will be configured in SharePoint Online or OneDrive.

Permission ID
ef2779dc-ef1b-4211-8310-8a0ac2450081
Catalog state
Enabled
Microsoft permission reference
FileStorageContainer.Manage.AllDelegatedAdmin consent

Manage all file storage containers

Allows the application to utilize the file storage container administration capabilities on behalf of an administrator user.

Permission ID
527b6d64-cdf5-4b8b-b336-4aa0b8ca2ce5
Catalog state
Enabled
Microsoft permission reference
FileStorageContainer.SelectedApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
40dc41bc-0f7e-42ff-89bd-d9516947e474
Catalog state
Enabled
Microsoft permission reference
FileStorageContainer.SelectedDelegatedAdmin consent

Access selected file storage containers

Allows the application to utilize the file storage container platform to manage containers on behalf of the signed in user. The specific file storage containers and the permissions granted to them will be configured in Microsoft 365 by the developer of each container type.

Permission ID
085ca537-6565-41c2-aca7-db852babc212
Catalog state
Enabled
Microsoft permission reference
Financials.ReadWrite.AllDelegatedDelegated consent

Read and write financials data

Allows the app to read and write financials data on behalf of the signed-in user.

Permission ID
f534bf13-55d4-45a9-8f3c-c92fe64d6131
Catalog state
Enabled
Microsoft permission reference
Goals-Export.Read.AllDelegatedAdmin consent

Read all goals and export jobs that a user can access

Allows the app to read all goals and export jobs that the signed-in user can access.

Permission ID
092211d9-ca1a-427b-813e-b79c7653fe71
Catalog state
Enabled
Microsoft permission reference
Goals-Export.ReadWrite.AllDelegatedAdmin consent

Have full access to all goals and export jobs a user can access

Allows the app to read goals, create and read export jobs that the signed-in user can access.

Permission ID
2edeb9fd-4228-480c-a26d-2ed52011cf3d
Catalog state
Enabled
Microsoft permission reference
Group-Conversation.Read.AllApplicationAdmin consent

Read all group conversations

Allows the app to read conversations of the groups this app has access to without a signed-in user.

Permission ID
4f0a8235-6f6f-4ec7-9500-34b452a4a0c3
Catalog state
Enabled
Microsoft permission reference
Group-Conversation.Read.AllDelegatedAdmin consent

Read group conversations

Allows the app to read group conversations that the signed-in user has access to.

Permission ID
c92fbbc2-50e0-4842-93ef-385c3293ea3d
Catalog state
Enabled
Microsoft permission reference
Group-Conversation.ReadWrite.AllApplicationAdmin consent

Read and write all group conversations

Allows the app to read and write conversations of the groups this app has access to without a signed-in user.

Permission ID
6679c91b-820a-4900-ab47-e97b197a89c4
Catalog state
Enabled
Microsoft permission reference
Group-Conversation.ReadWrite.AllDelegatedAdmin consent

Read and write group conversations

Allows the app to read and write group conversations that the signed-in user has access to.

Permission ID
302bcbb5-855a-4e49-ae20-94a331b0281e
Catalog state
Enabled
Microsoft permission reference
Group-OnPremisesSyncBehavior.ReadWrite.AllApplicationAdmin consent

Read and update the on-premises sync behavior of groups

Allows the app to update the on-premises sync behavior of all groups without a signed-in user.

Permission ID
2d9bd318-b883-40be-9df7-63ec4fcdc424
Catalog state
Enabled
Microsoft permission reference
Group-OnPremisesSyncBehavior.ReadWrite.AllDelegatedAdmin consent

Read and update the on-premises sync behavior of groups

Allows the app to read and update the on-premises sync behavior of groups on behalf of the signed-in user.

Permission ID
37e00479-5776-4659-aecf-4841ec5d590a
Catalog state
Enabled
Microsoft permission reference
Group.CreateApplicationAdmin consent

Create groups

Allows the app to create groups without a signed-in user.

Permission ID
bf7b1a76-6e77-406b-b258-bf5c7720e98f
Catalog state
Enabled
Microsoft permission reference
Group.Read.AllApplicationAdmin consent

Read all groups

Allows the app to read group properties and memberships, and read conversations for all groups, without a signed-in user.

Permission ID
5b567255-7703-4780-807c-7be8301ae99b
Catalog state
Enabled
Microsoft permission reference
Group.Read.AllDelegatedAdmin consent

Read all groups

Allows the app to list groups, and to read their properties and all group memberships on behalf of the signed-in user. Also allows the app to read calendar, conversations, files, and other group content for all groups the signed-in user can access.

Permission ID
5f8c59db-677d-491f-a6b8-5f174b11ec1d
Catalog state
Enabled
Microsoft permission reference
Group.ReadWrite.AllApplicationAdmin consent

Read and write all groups

Allows the app to create groups, read all group properties and memberships, update group properties and memberships, and delete groups. Also allows the app to read and write conversations. All of these operations can be performed by the app without a signed-in user.

Permission ID
62a82d76-70ea-41e2-9197-370581804d09
Catalog state
Enabled
Microsoft permission reference
Group.ReadWrite.AllDelegatedAdmin consent

Read and write all groups

Allows the app to create groups and read all group properties and memberships on behalf of the signed-in user. Additionally allows group owners to manage their groups and allows group members to update group content.

Permission ID
4e46008b-f24c-477d-8fff-7bb4ec7aafe0
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 11:34 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current