Microsoft Graph permissions
Find delegated and application permissions, consent requirements, and changes observed in Microsoft's public catalog.
Public permission catalog
1132 matching definitionsMail.ReadWriteApplicationAdmin consent
Read and write mail in all mailboxes
Allows the app to create, read, update, and delete mail in all mailboxes without a signed-in user. Does not include permission to send mail.
- Permission ID
- e2a3a72e-5f79-4c64-b1b1-878b674786c9
- Catalog state
- Enabled
Mail.ReadWriteDelegatedDelegated consent
Read and write access to user mail
Allows the app to create, read, update, and delete email in user mailboxes. Does not include permission to send mail.
- Permission ID
- 024d486e-b451-40bb-833d-3e66d98c5c73
- Catalog state
- Enabled
Mail.ReadWrite.SharedDelegatedDelegated consent
Read and write user and shared mail
Allows the app to create, read, update, and delete mail a user has permission to access, including their own and shared mail. Does not include permission to send mail.
- Permission ID
- 5df07973-7d5d-46ed-9847-1271055cbd51
- Catalog state
- Enabled
Mail.SendApplicationAdmin consent
Send mail as any user
Allows the app to send mail as any user without a signed-in user.
- Permission ID
- b633e1c5-b582-4048-a93e-9f11b44c7e96
- Catalog state
- Enabled
Mail.SendDelegatedDelegated consent
Send mail as a user
Allows the app to send mail as users in the organization.
- Permission ID
- e383f46e-2787-4529-855e-0e479a3ffac0
- Catalog state
- Enabled
Mail.Send.SharedDelegatedDelegated consent
Send mail on behalf of others
Allows the app to send mail as the signed-in user, including sending on-behalf of others.
- Permission ID
- a367ab51-6b49-43bf-a716-a1fb06d2a174
- Catalog state
- Enabled
MailboxFolder.ReadDelegatedDelegated consent
Read a user's mailbox folders
Allows the app to read the user's mailbox folders, on behalf of the the signed-in user.
- Permission ID
- 52dc2051-4958-4636-8f2a-281d39c6981c
- Catalog state
- Enabled
MailboxFolder.Read.AllApplicationAdmin consent
Read all the users' mailbox folders
Allows the app to read all the users' mailbox folders, without signed-in user.
- Permission ID
- 99280d24-a782-4793-93cc-0888549957f6
- Catalog state
- Enabled
MailboxFolder.ReadWriteDelegatedDelegated consent
Read and write a user's mailbox folders
Allows the app to read and write the user's mailbox folders, on behalf of the the signed-in user.
- Permission ID
- 077fde41-7e0b-4c5b-bcd1-e9d743a30c80
- Catalog state
- Enabled
MailboxFolder.ReadWrite.AllApplicationAdmin consent
Read and write all the users' mailbox folders
Allows the app to read and write all the users' mailbox folders, without signed-in user.
- Permission ID
- fef87b92-8391-4589-9da7-eb93dab7dc8a
- Catalog state
- Enabled
MailboxItem.ImportExportDelegatedDelegated consent
Export and import a user's mailbox items
Allows the app to export and import the user's mailbox items, on behalf of the the signed-in user.
- Permission ID
- df96e8a0-f4e1-4ecf-8d83-a429f822cbd6
- Catalog state
- Enabled
MailboxItem.ImportExport.AllApplicationAdmin consent
Export and import all the users' mailbox items
Allows the app to export and import all the users' mailbox items, without signed-in user.
- Permission ID
- 76577085-e73d-4f1d-b26a-85fb33892327
- Catalog state
- Enabled
MailboxItem.ReadDelegatedDelegated consent
Read a user's mailbox items
Allows the app to read the user's mailbox items, on behalf of the the signed-in user.
- Permission ID
- 82305458-296d-4edd-8b0b-74dd74c34526
- Catalog state
- Enabled
MailboxItem.Read.AllApplicationAdmin consent
Read all the users' mailbox items
Allows the app to read all the users' mailbox items, without signed-in user.
- Permission ID
- 7d9f353d-a7bd-4fbb-822a-26d5dd39a3ce
- Catalog state
- Enabled
MailboxSettings.ReadApplicationAdmin consent
Read all user mailbox settings
Allows the app to read user's mailbox settings without a signed-in user. Does not include permission to send mail.
- Permission ID
- 40f97065-369a-49f4-947c-6a255697ae91
- Catalog state
- Enabled
MailboxSettings.ReadDelegatedDelegated consent
Read user mailbox settings
Allows the app to the read user's mailbox settings. Does not include permission to send mail.
- Permission ID
- 87f447af-9fa4-4c32-9dfa-4a57a73d18ce
- Catalog state
- Enabled
MailboxSettings.ReadWriteApplicationAdmin consent
Read and write all user mailbox settings
Allows the app to create, read, update, and delete user's mailbox settings without a signed-in user. Does not include permission to send mail.
- Permission ID
- 6931bccd-447a-43d1-b442-00a195474933
- Catalog state
- Enabled
MailboxSettings.ReadWriteDelegatedDelegated consent
Read and write user mailbox settings
Allows the app to create, read, update, and delete user's mailbox settings. Does not include permission to send mail.
- Permission ID
- 818c620a-27a9-40bd-a6a5-d96f7d610b4b
- Catalog state
- Enabled
ManagedTenants.Read.AllDelegatedAdmin consent
Read all managed tenant information
Allows the app to read all managed tenant information on behalf of the signed-in user.
- Permission ID
- dc34164e-6c4a-41a0-be89-3ae2fbad7cd3
- Catalog state
- Enabled
ManagedTenants.ReadWrite.AllDelegatedAdmin consent
Read and write all managed tenant information
Allows the app to read and write all managed tenant information on behalf of the signed-in user.
- Permission ID
- b31fa710-c9b3-4d9e-8f5e-8036eecddab9
- Catalog state
- Enabled
Member.Read.HiddenApplicationAdmin consent
Read all hidden memberships
Allows the app to read the memberships of hidden groups and administrative units without a signed-in user.
- Permission ID
- 658aa5d8-239f-45c4-aa12-864f4fc7e490
- Catalog state
- Enabled
Member.Read.HiddenDelegatedAdmin consent
Read hidden memberships
Allows the app to read the memberships of hidden groups and administrative units on behalf of the signed-in user, for those hidden groups and administrative units that the signed-in user has access to.
- Permission ID
- f6a3db3e-f7e8-4ed2-a414-557c8c9830be
- Catalog state
- Enabled
MultiTenantOrganization.Read.AllApplicationAdmin consent
Read all multi-tenant organization details and tenants
Allows the app to read all multi-tenant organization details and tenants, without a signed-in user.
- Permission ID
- 4f994bc0-31bb-44bb-b480-7a7c1be8c02e
- Catalog state
- Enabled
MultiTenantOrganization.Read.AllDelegatedAdmin consent
Read multi-tenant organization details and tenants
Allows the app to read multi-tenant organization details and tenants on behalf of the signed-in user.
- Permission ID
- 526aa72a-5878-49fe-bf4e-357973af9b06
- Catalog state
- Enabled
MultiTenantOrganization.ReadBasic.AllApplicationAdmin consent
Read multi-tenant organization basic details and active tenants
Allows the app to read multi-tenant organization basic details and active tenants, without a signed-in user.
- Permission ID
- f9c2b2a7-3895-4b2e-80f6-c924b456e50b
- Catalog state
- Enabled