Microsoft Graph permissions

Read and write API connectors for authentication flows

Allows the app to read, create and manage the API connectors used in user authentication flows, on behalf of the signed-in user.

Permission ID

c67b52c5-7c69-48b6-9d48-7b3af3ded914

Catalog state

Enabled

Read all app catalogs

Allows the app to read apps in the app catalogs without a signed-in user.

Permission ID

e12dae10-5a57-4817-b79d-dfbec5348930

Catalog state

Enabled

Read all app catalogs

Allows the app to read the apps in the app catalogs.

Permission ID

88e58d74-d3df-44f3-ad47-e89edf4472e4

Catalog state

Enabled

Read and write to all app catalogs

Allows the app to create, read, update, and delete apps in the app catalogs without a signed-in user.

Permission ID

dc149144-f292-421e-b185-5953f2e98d7f

Catalog state

Enabled

Read and write to all app catalogs

Allows the app to create, read, update, and delete apps in the app catalogs.

Permission ID

1ca167d5-1655-44a1-8adf-1414072e1ef9

Catalog state

Enabled

Submit application packages to the catalog and cancel pending submissions

Allows the app to submit application packages to the catalog and cancel submissions that are pending review on behalf of the signed-in user.

Permission ID

3db89e36-7fa6-4012-b281-85f3d9d9fd2e

Catalog state

Enabled

Read the trusted certificate authority configuration for applications

Allows the app to read the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user.

Permission ID

af281d3a-030d-4122-886e-146fb30a0413

Catalog state

Enabled

Read and write the trusted certificate authority configuration for applications

Allows the app to create, read, update and delete the trusted certificate authority configuration which can be used to restrict application certificates based on their issuing authority, on behalf of the signed-in user.

Permission ID

4bae2ed4-473e-4841-a493-9829cfd51d48

Catalog state

Enabled

Read and write the remote desktop security configuration for all apps

Allows the app to read and write the remote desktop security configuration for all apps in your organization, without a signed-in user.

Permission ID

3be0012a-cc4e-426b-895b-f9c836bf6381

Catalog state

Enabled

Read and write the remote desktop security configuration for all apps

Allows the app to read and write other apps' remote desktop security configuration, on behalf of the signed-in user.

Permission ID

ffa91d43-2ad8-45cc-b592-09caddeb24bb

Catalog state

Enabled

Read all applications

Allows the app to read all applications and service principals without a signed-in user.

Permission ID

9a5d68dd-52b0-4cc2-bd40-abcf44ac3a30

Catalog state

Enabled

Read applications

Allows the app to read applications and service principals on behalf of the signed-in user.

Permission ID

c79f8feb-a9db-4090-85f9-90d820caa0eb

Catalog state

Enabled

Read and write all applications

Allows the app to create, read, update and delete applications and service principals without a signed-in user. Does not allow management of consent grants.

Permission ID

1bfefb4e-e0b5-418b-a88f-73c46d2cc8e9

Catalog state

Enabled

Read and write all applications

Allows the app to create, read, update and delete applications and service principals on behalf of the signed-in user. Does not allow management of consent grants.

Permission ID

bdfbf15f-ee85-4955-8675-146e8e5296b5

Catalog state

Enabled

Manage apps that this app creates or owns

Allows the app to create other applications, and fully manage those applications (read, update, update application secrets and delete), without a signed-in user. It cannot update any apps that it is not an owner of.

Permission ID

18a4783c-866b-4cc7-a460-3d5e5662c884

Catalog state

Enabled

Manage app permission grants and app role assignments

Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, without a signed-in user.

Permission ID

06b708a9-e830-4db3-a914-8e69da51d44f

Catalog state

Enabled

Manage app permission grants and app role assignments

Allows the app to manage permission grants for application permissions to any API (including Microsoft Graph) and application assignments for any app, on behalf of the signed-in user.

Permission ID

84bccea3-f856-4a8a-967b-dbe0a3d53a64

Catalog state

Enabled

Read user's approval items, approval requests and approval responses

Allows the app to read the signed-in user's approval items, approval requests and approval responses (created by the user or assigned to the user). Doesn't include permission to create, cancel, or update anything.

Permission ID

b0df437d-d341-4df0-aa3e-89ca81a1207f

Catalog state

Enabled

Read approvals data with a subscription.

Allows the app to read approvals event information for all users in your organization without a signed-in user.

Permission ID

9f265de7-8d5e-4e9a-a805-5e8bbc49656f

Catalog state

Enabled

Create and cancel user's approval items. Read user's approval items, requests, responses

Allows the app to create approvals on behalf of the signed-in user, cancel approvals created by the user and read any of the user's approvals (created by the user or assigned to the user).

Permission ID

6768d3af-4562-48ff-82d2-c5e19eb21b9c

Catalog state

Enabled

Read approvals data and create, update, or remove approval item subscriptions.

Allows the app to read approvals event information for all users in your organization without a signed-in user.

Permission ID

45583558-1113-4d06-8969-e79a28edc9ad

Catalog state

Enabled

Respond to a user's approval. Read user's approval items, requests, responses

Allows the app to create approvals on behalf of the signed-in user, cancel approvals created by the user and read any of the user's approvals (created by the user or assigned to the user).

Permission ID

89d944f2-2011-44ad-830c-aa9bf5ef2319

Catalog state

Enabled

Read attack simulation data of an organization

Allows the app to read attack simulation and training data for an organization without a signed-in user.

Permission ID

93283d0a-6322-4fa8-966b-8c121624760d

Catalog state

Enabled

Read attack simulation data of an organization

Allows the app to read attack simulation and training data for an organization for the signed-in user.

Permission ID

104a7a4b-ca76-4677-b7e7-2f4bc482f381

Catalog state

Enabled

Read, create, and update all attack simulation data of an organization

Allows the app to read, create, and update attack simulation and training data for an organization without a signed-in user.

Permission ID

e125258e-8c8a-42a8-8f55-ab502afa52f3

Catalog state

Enabled