Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 12:36 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
GroupMember.Read.AllApplicationAdmin consent

Read all group memberships

Allows the app to read memberships and basic group properties for all groups without a signed-in user.

Permission ID
98830695-27a2-44f7-8c18-0c3ebc9698f6
Catalog state
Enabled
Microsoft permission reference
GroupMember.Read.AllDelegatedAdmin consent

Read group memberships

Allows the app to list groups, read basic group properties and read membership of all groups the signed-in user has access to.

Permission ID
bc024368-1153-4739-b217-4326f2e966d0
Catalog state
Enabled
Microsoft permission reference
GroupMember.ReadWrite.AllApplicationAdmin consent

Read and write all group memberships

Allows the app to list groups, read basic properties, read and update the membership of the groups this app has access to without a signed-in user. Group properties and owners cannot be updated and groups cannot be deleted.

Permission ID
dbaae8cf-10b5-4b86-a4a1-f871c94c6695
Catalog state
Enabled
Microsoft permission reference
GroupMember.ReadWrite.AllDelegatedAdmin consent

Read and write group memberships

Allows the app to list groups, read basic properties, read and update the membership of the groups the signed-in user has access to. Group properties and owners cannot be updated and groups cannot be deleted.

Permission ID
f81125ac-d3b7-4573-a3b2-7099cc39df9e
Catalog state
Enabled
Microsoft permission reference
HealthMonitoringAlert.Read.AllApplicationAdmin consent

Read all scenario health monitoring alerts

Allows the app to read all scenario health monitoring alerts, without a signed-in user.

Permission ID
5183ed5d-b7f8-4e9a-915e-dafb46b9cb62
Catalog state
Enabled
Microsoft permission reference
HealthMonitoringAlert.Read.AllDelegatedAdmin consent

Read all scenario health monitoring alerts

Allows the app to read all scenario health monitoring alerts

Permission ID
74b4ff32-4917-4536-a66d-38a4861e6220
Catalog state
Enabled
Microsoft permission reference
HealthMonitoringAlert.ReadWrite.AllApplicationAdmin consent

Read and write all scenario monitoring alerts

Allows the app to read and write all scenario monitoring alerts, without a signed-in user.

Permission ID
ac29eb50-f2f9-4518-a117-4bef18e84c7d
Catalog state
Enabled
Microsoft permission reference
HealthMonitoringAlert.ReadWrite.AllDelegatedAdmin consent

Read and write all scenario monitoring alerts

Allows the app to read and write all scenario monitoring alerts, on behalf of the signed-in user.

Permission ID
b7c60f27-2195-4d5f-96a7-6b98bdfd9664
Catalog state
Enabled
Microsoft permission reference
HealthMonitoringAlertConfig.Read.AllApplicationAdmin consent

Read all scenario health monitoring alert configurations

Allows the app to read all scenario health monitoring alert configurations, without a signed-in user.

Permission ID
bb424d73-e898-4c97-9d42-688c32810003
Catalog state
Enabled
Microsoft permission reference
HealthMonitoringAlertConfig.Read.AllDelegatedAdmin consent

Read all scenario health monitoring alert configurations

Allows the app to read all scenario health monitoring alert configurations

Permission ID
fb873030-8626-47e6-96ff-8a5bff3b725f
Catalog state
Enabled
Microsoft permission reference
HealthMonitoringAlertConfig.ReadWrite.AllApplicationAdmin consent

No display name in the catalog

Microsoft supplies no description in this catalog.

Permission ID
432e76f0-8af6-4315-a853-66ab9538f480
Catalog state
Enabled
Microsoft permission reference
HealthMonitoringAlertConfig.ReadWrite.AllDelegatedAdmin consent

Read and write all scenario monitoring alert configurations

Allows the app to read and write all scenario monitoring alert configurations, on behalf of the signed-in user.

Permission ID
b3e5ebc6-1c23-4337-8286-3f27165addb4
Catalog state
Enabled
Microsoft permission reference
IdentityProvider.Read.AllApplicationAdmin consent

Read identity providers

Allows the app to read your organization's identity (authentication) providers' properties without a signed in user.

Permission ID
e321f0bb-e7f7-481e-bb28-e3b0b32d4bd0
Catalog state
Enabled
Microsoft permission reference
IdentityProvider.Read.AllDelegatedAdmin consent

Read identity providers

Allows the app to read your organization's identity (authentication) providers' properties on behalf of the user.

Permission ID
43781733-b5a7-4d1b-98f4-e8edff23e1a9
Catalog state
Enabled
Microsoft permission reference
IdentityProvider.ReadWrite.AllApplicationAdmin consent

Read and write identity providers

Allows the app to read and write your organization's identity (authentication) providers' properties without a signed in user.

Permission ID
90db2b9a-d928-4d33-a4dd-8442ae3d41e4
Catalog state
Enabled
Microsoft permission reference
IdentityProvider.ReadWrite.AllDelegatedAdmin consent

Read and write identity providers

Allows the app to read and write your organization's identity (authentication) providers' properties on behalf of the user.

Permission ID
f13ce604-1677-429f-90bd-8a10b9f01325
Catalog state
Enabled
Microsoft permission reference
IdentityRiskEvent.Read.AllApplicationAdmin consent

Read all identity risk event information

Allows the app to read the identity risk event information for your organization without a signed in user.

Permission ID
6e472fd1-ad78-48da-a0f0-97ab2c6b769e
Catalog state
Enabled
Microsoft permission reference
IdentityRiskEvent.Read.AllDelegatedAdmin consent

Read identity risk event information

Allows the app to read identity risk event information for all users in your organization on behalf of the signed-in user.

Permission ID
8f6a01e7-0391-4ee5-aa22-a3af122cef27
Catalog state
Enabled
Microsoft permission reference
IdentityRiskEvent.ReadWrite.AllApplicationAdmin consent

Read and write all risk detection information

Allows the app to read and update identity risk detection information for your organization without a signed-in user. Update operations include confirming risk event detections.

Permission ID
db06fb33-1953-4b7b-a2ac-f1e2c854f7ae
Catalog state
Enabled
Microsoft permission reference
IdentityRiskEvent.ReadWrite.AllDelegatedAdmin consent

Read and write risk event information

Allows the app to read and update identity risk event information for all users in your organization on behalf of the signed-in user. Update operations include confirming risk event detections. 

Permission ID
9e4862a5-b68f-479e-848a-4e07e25c9916
Catalog state
Enabled
Microsoft permission reference
IdentityRiskyServicePrincipal.Read.AllApplicationAdmin consent

Read all identity risky service principal information

Allows the app to read all risky service principal information for your organization, without a signed-in user.

Permission ID
607c7344-0eed-41e5-823a-9695ebe1b7b0
Catalog state
Enabled
Microsoft permission reference
IdentityRiskyServicePrincipal.Read.AllDelegatedAdmin consent

Read all identity risky service principal information

Allows the app to read all identity risky service principal information for your organization, on behalf of the signed-in user.

Permission ID
ea5c4ab0-5a73-4f35-8272-5d5337884e5d
Catalog state
Enabled
Microsoft permission reference
IdentityRiskyServicePrincipal.ReadWrite.AllApplicationAdmin consent

Read and write all identity risky service principal information

Allows the app to read and update identity risky service principal for your organization, without a signed-in user.

Permission ID
cb8d6980-6bcb-4507-afec-ed6de3a2d798
Catalog state
Enabled
Microsoft permission reference
IdentityRiskyServicePrincipal.ReadWrite.AllDelegatedAdmin consent

Read and write all identity risky service principal information

Allows the app to read and update identity risky service principal information for all service principals in your organization, on behalf of the signed-in user. Update operations include dismissing risky service principals.

Permission ID
bb6f654c-d7fd-4ae3-85c3-fc380934f515
Catalog state
Enabled
Microsoft permission reference
IdentityRiskyUser.Read.AllApplicationAdmin consent

Read all identity risky user information

Allows the app to read the identity risky user information for your organization without a signed in user.

Permission ID
dc5007c0-2d7d-4c42-879c-2dab87571379
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 12:36 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current