Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources or documents need attention: 259/260 feeds/APIs · 416/439 docs · checked 15:39 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Graph permissions

Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.

Public permission catalog

1132 matching definitions
Mail.ReadWriteApplicationAdmin consent

Read and write mail in all mailboxes

Allows the app to create, read, update, and delete mail in all mailboxes without a signed-in user. Does not include permission to send mail.

Permission ID
e2a3a72e-5f79-4c64-b1b1-878b674786c9
Catalog state
Enabled
Microsoft permission reference
Mail.ReadWriteDelegatedDelegated consent

Read and write access to user mail

Allows the app to create, read, update, and delete email in user mailboxes. Does not include permission to send mail.

Permission ID
024d486e-b451-40bb-833d-3e66d98c5c73
Catalog state
Enabled
Microsoft permission reference
Mail.ReadWrite.SharedDelegatedDelegated consent

Read and write user and shared mail

Allows the app to create, read, update, and delete mail a user has permission to access, including their own and shared mail. Does not include permission to send mail.

Permission ID
5df07973-7d5d-46ed-9847-1271055cbd51
Catalog state
Enabled
Microsoft permission reference
Mail.SendApplicationAdmin consent

Send mail as any user

Allows the app to send mail as any user without a signed-in user.

Permission ID
b633e1c5-b582-4048-a93e-9f11b44c7e96
Catalog state
Enabled
Microsoft permission reference
Mail.SendDelegatedDelegated consent

Send mail as a user

Allows the app to send mail as users in the organization.

Permission ID
e383f46e-2787-4529-855e-0e479a3ffac0
Catalog state
Enabled
Microsoft permission reference
Mail.Send.SharedDelegatedDelegated consent

Send mail on behalf of others

Allows the app to send mail as the signed-in user, including sending on-behalf of others.

Permission ID
a367ab51-6b49-43bf-a716-a1fb06d2a174
Catalog state
Enabled
Microsoft permission reference
MailboxFolder.ReadDelegatedDelegated consent

Read a user's mailbox folders

Allows the app to read the user's mailbox folders, on behalf of the the signed-in user.

Permission ID
52dc2051-4958-4636-8f2a-281d39c6981c
Catalog state
Enabled
Microsoft permission reference
MailboxFolder.Read.AllApplicationAdmin consent

Read all the users' mailbox folders

Allows the app to read all the users' mailbox folders, without signed-in user.

Permission ID
99280d24-a782-4793-93cc-0888549957f6
Catalog state
Enabled
Microsoft permission reference
MailboxFolder.ReadWriteDelegatedDelegated consent

Read and write a user's mailbox folders

Allows the app to read and write the user's mailbox folders, on behalf of the the signed-in user.

Permission ID
077fde41-7e0b-4c5b-bcd1-e9d743a30c80
Catalog state
Enabled
Microsoft permission reference
MailboxFolder.ReadWrite.AllApplicationAdmin consent

Read and write all the users' mailbox folders

Allows the app to read and write all the users' mailbox folders, without signed-in user.

Permission ID
fef87b92-8391-4589-9da7-eb93dab7dc8a
Catalog state
Enabled
Microsoft permission reference
MailboxItem.ImportExportDelegatedDelegated consent

Export and import a user's mailbox items

Allows the app to export and import the user's mailbox items, on behalf of the the signed-in user.

Permission ID
df96e8a0-f4e1-4ecf-8d83-a429f822cbd6
Catalog state
Enabled
Microsoft permission reference
MailboxItem.ImportExport.AllApplicationAdmin consent

Export and import all the users' mailbox items

Allows the app to export and import all the users' mailbox items, without signed-in user.

Permission ID
76577085-e73d-4f1d-b26a-85fb33892327
Catalog state
Enabled
Microsoft permission reference
MailboxItem.ReadDelegatedDelegated consent

Read a user's mailbox items

Allows the app to read the user's mailbox items, on behalf of the the signed-in user.

Permission ID
82305458-296d-4edd-8b0b-74dd74c34526
Catalog state
Enabled
Microsoft permission reference
MailboxItem.Read.AllApplicationAdmin consent

Read all the users' mailbox items

Allows the app to read all the users' mailbox items, without signed-in user.

Permission ID
7d9f353d-a7bd-4fbb-822a-26d5dd39a3ce
Catalog state
Enabled
Microsoft permission reference
MailboxSettings.ReadApplicationAdmin consent

Read all user mailbox settings

Allows the app to read user's mailbox settings without a signed-in user. Does not include permission to send mail.

Permission ID
40f97065-369a-49f4-947c-6a255697ae91
Catalog state
Enabled
Microsoft permission reference
MailboxSettings.ReadDelegatedDelegated consent

Read user mailbox settings

Allows the app to the read user's mailbox settings. Does not include permission to send mail.

Permission ID
87f447af-9fa4-4c32-9dfa-4a57a73d18ce
Catalog state
Enabled
Microsoft permission reference
MailboxSettings.ReadWriteApplicationAdmin consent

Read and write all user mailbox settings

Allows the app to create, read, update, and delete user's mailbox settings without a signed-in user. Does not include permission to send mail.

Permission ID
6931bccd-447a-43d1-b442-00a195474933
Catalog state
Enabled
Microsoft permission reference
MailboxSettings.ReadWriteDelegatedDelegated consent

Read and write user mailbox settings

Allows the app to create, read, update, and delete user's mailbox settings. Does not include permission to send mail.

Permission ID
818c620a-27a9-40bd-a6a5-d96f7d610b4b
Catalog state
Enabled
Microsoft permission reference
ManagedTenants.Read.AllDelegatedAdmin consent

Read all managed tenant information

Allows the app to read all managed tenant information on behalf of the signed-in user.

Permission ID
dc34164e-6c4a-41a0-be89-3ae2fbad7cd3
Catalog state
Enabled
Microsoft permission reference
ManagedTenants.ReadWrite.AllDelegatedAdmin consent

Read and write all managed tenant information

Allows the app to read and write all managed tenant information on behalf of the signed-in user.

Permission ID
b31fa710-c9b3-4d9e-8f5e-8036eecddab9
Catalog state
Enabled
Microsoft permission reference
Member.Read.HiddenApplicationAdmin consent

Read all hidden memberships

Allows the app to read the memberships of hidden groups and administrative units without a signed-in user.

Permission ID
658aa5d8-239f-45c4-aa12-864f4fc7e490
Catalog state
Enabled
Microsoft permission reference
Member.Read.HiddenDelegatedAdmin consent

Read hidden memberships

Allows the app to read the memberships of hidden groups and administrative units on behalf of the signed-in user, for those hidden groups and administrative units that the signed-in user has access to.

Permission ID
f6a3db3e-f7e8-4ed2-a414-557c8c9830be
Catalog state
Enabled
Microsoft permission reference
MultiTenantOrganization.Read.AllApplicationAdmin consent

Read all multi-tenant organization details and tenants

Allows the app to read all multi-tenant organization details and tenants, without a signed-in user.

Permission ID
4f994bc0-31bb-44bb-b480-7a7c1be8c02e
Catalog state
Enabled
Microsoft permission reference
MultiTenantOrganization.Read.AllDelegatedAdmin consent

Read multi-tenant organization details and tenants

Allows the app to read multi-tenant organization details and tenants on behalf of the signed-in user.

Permission ID
526aa72a-5878-49fe-bf4e-357973af9b06
Catalog state
Enabled
Microsoft permission reference
MultiTenantOrganization.ReadBasic.AllApplicationAdmin consent

Read multi-tenant organization basic details and active tenants

Allows the app to read multi-tenant organization basic details and active tenants, without a signed-in user.

Permission ID
f9c2b2a7-3895-4b2e-80f6-c924b456e50b
Catalog state
Enabled
Microsoft permission reference

Source: Microsoft Graph public permission definitions.

ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 21 Oct 15:39 UTC · 259 of 260 readable · 257 fully read · documentation 416/439 current